lovetastic.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:f3:a6:76:13:bc:2c:58:61:10:dd:77:7e:31:80:ee:b2:2a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lovetastic.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:a6:76:13:bc:2c:58:61:10:dd:77:7e:31:80:ee:b2:2a
Serial Number (int): 344246737895672790912382280583156979380778
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:c5:b5:7e:73:bd:f8:bd:8e:c1:44:9b:ba:c3:32:26:20:05:36:74
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d3:ef:0d:39:93:4b:12:bb:13:e7:c9:bc:a4:3c:fc:1d:a4:3f:6e:06
Fingerprint (sha256): 75:a2:7d:b6:09:83:0a:d6:e5:f5:95:6c:3f:b0:35:73:4e:ed:97:5b:50:0e:ad:d9:23:bd:9e:b2:88:38:f5:ee

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lovetastic.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lovetastic.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lovetastic.ch
www.lovetastic.ch

Other certificates including the domain name lovetastic.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for lovetastic.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxhx/DJOnins6DOA29zu
IftPPwckRzRM9QVPXTcogs+OcewEY/oTAjmjkGr0Zlb/vP5EHBOI/fI/xlN0D+Z/
clIEWs6zu4PhknLmFggxUuAN9v9xR17em39X1Y9xLrmCU9CYZ3wGvmc1nkZdJnJk
zM9ribTSTUuQ1GdxZ4LKcdE3HNPH1NjyWGre6jaRapWSypbuyJhb3NWqy4kMiQsN
LXgjUI8cUoG1pwDaoAAVFn231HRhtOidpO26scM/er7eE1e16Ukn8F8PF9LAyG9F
b0za1m1QcZs0RtLboMOPjnWhvm3r0RzzUfjBnlBw2fc0uQsryi/SU0azNjdyMy8X
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344246737895672790912382280583156979380778
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 20:17:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 20:17:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lovetastic.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22608710993174185376062272175404505798766554889106631255353423805526611459773213147683718989191303922922523764448291299163057652950845305800507646391798477163074296975534244659955725055363312219384544891070241039645490629422998576187577522453459392205628496314488201289841816872271968440030664241934839089850794595061057297767925371394954647909230956205063651278848500588093319166872813665350013737152034156649382428064058449810251120528350919458966682664653434937993113212751487573395930156618530908836505688476062859531677572424707574393866931801208372794072558640801122273397663211744006231602338708606794068858703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aac5b57e73bdf8bd8ec1449bbac3322620053674
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovetastic.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovetastic.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189b81c8ec400000403004730450220236b4a70226e8dd245eece318428de9f8cb1ac92f76cb2f24631c47e5c9adbf9022100e9edefc84fd815e724c902abc06d87b62a9c9bcd0c11332fac061c28741dee710077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189b81c8edc0000040300483046022100b79423514a23f73ef9b4b51f4f1456925803b1a1f2493a64accd9090b04cb1d5022100dc408291be02c4dc2208408232d19827093f1649876216c3d80e721f9cdf21cd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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