www.ducons.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a1:02:35:b2:d4:c7:21:5f:bf:d5:3d:f6:b9:54:a2:3f:32 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.ducons.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a1:02:35:b2:d4:c7:21:5f:bf:d5:3d:f6:b9:54:a2:3f:32Serial Number (int): 316125256144403812501776509717894047874866
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5c:31:57:52:20:f0:ea:93:9b:0e:27:fc:1f:e3:d7:f7:a6:3e:b5:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a5:a5:92:ca:24:d2:eb:92:c3:92:07:a1:09:3d:ae:cb:58:4e:cb:91
Fingerprint (sha256): 76:7d:08:25:24:bf:53:89:65:76:0e:84:38:23:8a:5a:92:8e:0c:d6:f7:34:59:fa:0d:32:5c:40:c1:ac:71:2d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.ducons.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ducons.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ducons.ch
Other certificates including the domain name ducons.ch
(limited to 100 certificates)
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
ducons.ch
ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
ducons.ch
www.ducons.ch
www.ducons.ch
ducons.ch
www.ducons.ch
ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
ducons.ch
ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
ducons.ch
www.ducons.ch
www.ducons.ch
ducons.ch
www.ducons.ch
ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
www.ducons.ch
Certificate
The complete raw certificate details for www.ducons.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISA6ECNbLUxyFfv9U99rlUoj8yMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjYwNzIxNTdaFw0x OTExMjQwNzIxNTdaMBgxFjAUBgNVBAMTDXd3dy5kdWNvbnMuY2gwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvwA0QRKvl7Rfflg1rm0pTKAZ6k1sZBhbT 3M2doPpz4tRpHSoLkmTrpV7Adl3MhhPSsto6TjPGTbFJaGJnre8zYy4UTn6x04Yh wOWHIu6V92EaOzM7odhRAqqqM8DHVXBfaJ3rOSGaOyRrWt+aczr9kMsGg0YOdxDp bOX3hsbclMTWY4cfWKtPewibVaJr+WiUiL2Rh5yOoXyYX0o+LF0AY49XTIk9P5+w 5vmPt42iNtAcOGIZJ19eCyczbIN0NPRMpvCOM0/odJemA+oW6M98EWrmUhCeffIS /QLNVD/bMu8umbOu8I3sPci85RAjAI53EtYWr8eSl4sste5Y4vBhAgMBAAGjggJh MIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFwxV1Ig8OqTmw4n/B/j1/emPrWA MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y Zy8wGAYDVR0RBBEwD4INd3d3LmR1Y29ucy5jaDBMBgNVHSAERTBDMAgGBmeBDAEC ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl bmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AOJpS64m6OlACeiG G7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABbM0EeIgAAAQDAEYwRAIgN883gh7SiCso shN0sZDYEDhITFwP9zSyuCJa8mBsYBQCICjFOBz7JnFeCrUEnfP9nRsCYTGZX7PU UnhORns/2FggAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFs zQR6mwAABAMARzBFAiEAygEZ3tAtZMDCmX3Plrux0u+DF3vHbT783n8ArZDkFRIC IEsoYRUQB9cRviAFBuXelmu7F/4uvGxq1kjMuExuXNyuMA0GCSqGSIb3DQEBCwUA A4IBAQAwOMw4zipF+fIHapLkSXBsjJ/PBMVd+FqSYnLvIHn0egoegAv80ExNb9vt preqv6Emy39otCTlsBG79FgLZM9yqJYNVgGIKhcmDeWd0c1TPqulnr2lxqgxxWWm J73tUAVcuqJpebh//U+lHjvBBTu62JqDHh0zzQnIE6vcv16ZYwbeJu4Yg/plx2um vWtPIE2Tvduh0XYA6HDB5OJO8jGmuljCv7kBgS73BicP0J5m2fjAmpvcoqS2mVaO LoXwolg46ckB8euNSsuV3UJY6bRXMFOk1Iw3yW79eXltNchyucXgf1JKpKCLHR+G MRY8z1zdVcVDgFibg/PbRwAfZFmw -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78ANEESr5e0X35YNa5tK UygGepNbGQYW09zNnaD6c+LUaR0qC5Jk66VewHZdzIYT0rLaOk4zxk2xSWhiZ63v M2MuFE5+sdOGIcDlhyLulfdhGjszO6HYUQKqqjPAx1VwX2id6zkhmjska1rfmnM6 /ZDLBoNGDncQ6Wzl94bG3JTE1mOHH1irT3sIm1Wia/lolIi9kYecjqF8mF9KPixd AGOPV0yJPT+fsOb5j7eNojbQHDhiGSdfXgsnM2yDdDT0TKbwjjNP6HSXpgPqFujP fBFq5lIQnn3yEv0CzVQ/2zLvLpmzrvCN7D3IvOUQIwCOdxLWFq/HkpeLLLXuWOLw YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316125256144403812501776509717894047874866 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 07:21:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-24 07:21:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ducons.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30265658779188858050361254084347848679060639624545406824507638282722764926552377821340010425270014957563415969989948217885578728322052921611630196814344720297209958121165908313303335601022645839060734671953534873072128771045304583717698441397812047544538164515966647706665606369114331908995297085688672915564761532493059571886109093592822598753263424277532721278134120416723747649689638064375070315265752428980544467147699414617774280285077193054123790602378744214902267623537553319504905903440261850644393775148307470155514423406628210619597987718446633080845910519348580044331039259108203471694546342271345290834017 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5c31575220f0ea939b0e27fc1fe3d7f7a63eb580 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ducons.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ccd0478880000040300463044022037cf37821ed2882b28b21374b190d81038484c5c0ff734b2b8225af2606c6014022028c5381cfb26715e0ab5049df3fd9d1b026131995fb3d452784e467b3fd85820007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ccd047a9b0000040300473045022100ca0119ded02d64c0c2997dcf96bbb1d2ef83177bc76d3efcde7f00ad90e4151202204b2861151007d711be200506e5de966bbb17fe2ebc6c6ad648ccb84c6e5cdcae . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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