www.garage-spinazzola.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:04:37:23:a3:94:9a:4e:bc:7b:9f:52:8e:a7:65:50:67:7a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.garage-spinazzola.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:04:37:23:a3:94:9a:4e:bc:7b:9f:52:8e:a7:65:50:67:7a
Serial Number (int): 262771279850929002210847051737727014823802
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5b:44:da:0c:c6:46:01:62:69:0c:ce:8d:0b:82:61:1e:27:ef:81:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:bc:dc:a6:dc:09:a8:fd:a8:8e:65:f1:c7:82:d8:ef:ad:6e:5d:eb
Fingerprint (sha256): 73:1f:91:8f:ca:cf:10:53:1f:61:ab:df:2b:3b:f2:15:53:e6:c1:46:ad:0b:e6:7d:ad:32:98:7f:c1:cc:1e:77

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.garage-spinazzola.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.garage-spinazzola.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.garage-spinazzola.ch

Other certificates including the domain name garage-spinazzola.ch

(limited to 100 certificates)
garage-spinazzola.ch
garage-spinazzola.ch
garage-spinazzola.ch
www.garage-spinazzola.ch
www.garage-spinazzola.ch
www.garage-spinazzola.ch
garage-spinazzola.ch
www.garage-spinazzola.ch
www.garage-spinazzola.ch
garage-spinazzola.ch
garage-spinazzola.ch
www.garage-spinazzola.ch
garage-spinazzola.ch
www.garage-spinazzola.ch
www.garage-spinazzola.ch
garage-spinazzola.ch
garage-spinazzola.ch
www.garage-spinazzola.ch
garage-spinazzola.ch
www.garage-spinazzola.ch
garage-spinazzola.ch
garage-spinazzola.ch
garage-spinazzola.ch
garage-spinazzola.ch
www.garage-spinazzola.ch

Certificate

The complete raw certificate details for www.garage-spinazzola.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISAwQ3I6OUmk68e59SjqdlUGd6MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjQwMTMzMThaFw0x
OTEwMjIwMTMzMThaMCMxITAfBgNVBAMTGHd3dy5nYXJhZ2Utc3BpbmF6em9sYS5j
aDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK+kututQVrOdANMK13r
gT9IohpuDLn9YblzcBA19o0s07NcCimM93iQfHSaQ9g+8LXMMO94PbqCh8EkLxQz
tbzaxgv2qTorjpMZP6WkhzaFzvjkCmQ5k+qdX6s4mmM9hBK4kOvmERtisE5moYUP
aLZMMhuLxsIjb1MzDTBE/wzrstrLf+cSGwm4CSTfkoY1kH1QYL/6AfDxV0pVP1xy
X0eulP5HxVfN5QFc+VH8/Q8qW6C7crK2xOVOGOZdkgLnl9Mm6+3sbr21NJnDwpL0
FRMF1WAVo1T2MdR/SHAQIx+9cJsZOVacQ9YMx54zUJfOus6srGwWOSTuHiQ3w1M7
WM0CAwEAAaOCAm0wggJpMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUW0TaDMZGAWJp
DM6NC4JhHifvgbMwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzAjBgNVHREEHDAaghh3d3cuZ2FyYWdlLXNwaW5henpvbGEu
Y2gwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWwh
02gjAAAEAwBHMEUCIBeAhghVm2nEKGk8DL6y9h925IU2wtqbze75fFy/BwOwAiEA
+9AjrHKrDf8r2gKxpwtz4mPWggGLJjzh8vMHWb9h08UAdgBj8tvN6DvMLM8LcoQn
V2szpI1hd4+9daY4scdoVEvYjQAAAWwh02hGAAAEAwBHMEUCIFD1ZN3MJGc+u9da
9m1Vv95k4I8DHTO2F2Qqjbaj2O5+AiEA/8Z91WgfKu1UdTnZAuibQloTS9faVbYq
A3CrwPdoBQ8wDQYJKoZIhvcNAQELBQADggEBAJQm4Q7L0UGZhUXt+3dSj8QT4aNt
qG2qM5vP4kD6gvg7VTFWRqzGQkozK5187tvisVff/0MtIypL8f01HCPANhT7kQ78
wF10OJSsjs/qgwypd+VXECtalvSbP2tDM62Z62JLqtCBI0HfLQpw5w4zqydRbdFW
fm1T8hA7dUiNXvYXP1l/3euyQ7awydcHG+M48Ta0eu0Wkrtqk8InVBM4QjtjSWVu
3MrcocxAMNsh+K+m6rYU5i0pEgF0wZkRnI+GIXz45YGZ26ZJVa5AxgnYVzlTHmSn
clfcJqqJrmGAcumWDSC8uaGYEsxGKNyemivZ08t/u79HYTvO0zx5YbdoC3M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6S6261BWs50A0wrXeuB
P0iiGm4Muf1huXNwEDX2jSzTs1wKKYz3eJB8dJpD2D7wtcww73g9uoKHwSQvFDO1
vNrGC/apOiuOkxk/paSHNoXO+OQKZDmT6p1fqziaYz2EEriQ6+YRG2KwTmahhQ9o
tkwyG4vGwiNvUzMNMET/DOuy2st/5xIbCbgJJN+ShjWQfVBgv/oB8PFXSlU/XHJf
R66U/kfFV83lAVz5Ufz9DypboLtysrbE5U4Y5l2SAueX0ybr7exuvbU0mcPCkvQV
EwXVYBWjVPYx1H9IcBAjH71wmxk5VpxD1gzHnjNQl866zqysbBY5JO4eJDfDUztY
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262771279850929002210847051737727014823802
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 01:33:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 01:33:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.garage-spinazzola.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22172934717434824818640592366525574281069672294858233295052840593498111290730187436891988632800465368469193418699251507540556009023592948308834637426210433456582376014295387805333422920070318913260124626914345918939623909742440660079403238629038160590505663593149735498316607468836159789622698330063290004238419317811806558992052228782469800673200705632951947048536371697482305420458979977886293274621635729982460541393507371704404401206347267418265403486282144065261326340295719251916577238635858258009551010875278106356497241502627126657534669383134883533124198588197217920818307236745420136353857650848458757331149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b44da0cc6460162690cce8d0b82611e27ef81b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garage-spinazzola.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c21d368230000040300473045022017808608559b69c428693c0cbeb2f61f76e48536c2da9bcdeef97c5cbf0703b0022100fbd023ac72ab0dff2bda02b1a70b73e263d682018b263ce1f2f30759bf61d3c500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c21d368460000040300473045022050f564ddcc24673ebbd75af66d55bfde64e08f031d33b617642a8db6a3d8ee7e022100ffc67dd5681f2aed547539d902e89b425a134bd7da55b62a0370abc0f768050f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009426e10ecbd141998545edfb77528fc413e1a36da86daa339bcfe240fa82f83b55315646acc6424a332b9d7ceedbe2b157dfff432d232a4bf1fd351c23c03614fb910efcc05d743894ac8ecfea830ca977e557102b5a96f49b3f6b4333ad99eb624baad0812341df2d0a70e70e33ab27516dd1567e6d53f2103b75488d5ef6173f597fddebb243b6b0c9d7071be338f136b47aed1692bb6a93c227541338423b6349656edccadca1cc4030db21f8afa6eab614e62d29120174c199119c8f86217cf8e58199dba64955ae40c609d85739531e64a77257dc26aa89ae618072e9960d20bcb9a19812cc4628dc9e9a2bd9d3cb7fbbbf47613bced33c7961b7680b73