markusko.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:96:63:f7:13:d7:ec:ce:3d:6f:8f:8c:02:db:3f:30:b4:d8 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=markusko.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:63:f7:13:d7:ec:ce:3d:6f:8f:8c:02:db:3f:30:b4:d8
Serial Number (int): 312512089304801399434327149934178013852888
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:3d:6f:dd:8d:e4:52:28:1d:be:72:01:5c:8d:3b:48:1c:25:4a:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4f:d0:3c:40:db:80:ed:71:5e:d2:4f:06:27:d0:0e:5b:8d:cd:c8:42
Fingerprint (sha256): 77:21:8e:80:2a:90:99:e8:15:f5:fc:58:84:3f:7a:8c:ec:60:3f:98:d4:59:26:16:75:d6:77:33:46:35:bb:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate markusko.ch

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for markusko.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gallry.markusko.ch
koch.has.enough.coffee
markusko.ch
pastr.markusko.ch
sesame.markusko.ch
stalkme.markusko.ch
www.markusko.ch

Other certificates including the domain name markusko.ch

(limited to 100 certificates)
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
stats.moin-alex.de
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
docker.markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
docker.markusko.ch

Certificate

The complete raw certificate details for markusko.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgISA5Zj9xPX7M49b4+MAts/MLTYMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAxMTIxMTAzMzJaFw0x
ODA0MTIxMTAzMzJaMBYxFDASBgNVBAMTC21hcmt1c2tvLmNoMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAqkBJk1837/k24sD73bfL0NzdS7QEJgaF2g9n
W6bFNlpawaK+ZTB1G0A0Hn2GkxnUgz4sUiyDmEwJwNEeeTpZRcvgK8Dqh2s/A1AK
kQGpG6TOuVpZdJvF79CXZao1qHBXsxBde0ueTLnmmKia/kqJLMH2jbi2x646HCT1
y4ejJVDANbuIZHjpaO3DAexHgEQfx/qmGpe5uZlvRwsQdC7v5Co3sYNGKZ7JRt+L
5E65/pA0hBU8w5vIf+6cfX7K6zXgh8IEMae/8qGi50OsdTuBgH9pmM+4VNXe5PiT
QhQOMECfX6GhlJqMYqgB/D+iECEw1MFTgwy+PYI16mDFM7n/lfl4NjIlDC/KeA2L
uQkCegxgmCrnE7irKsjYeA/A545YB7Y2KVNpDtwhnpDb/VSLrEEffHdivpiWmivr
KhWcJlcmaQLiWlbcsqCQOMc+bWOjLtphEY4nL+B7cpk20fZiL7QSVszqpSVFK5SV
HMo95Hoqx35frs+cVePQprOWB5Y5bpLW+h3m1AN+zL9y2d6VTIWeQvjmpSaIXFtR
FEeeCr3VGHJRZuBL733Bn8g27nhuQDALXbPXlG050FDoxDmJ8j4rV4qGaqQh94Bd
DdSDVoiGmKLEvm1hSONRxSxh8nHmcvgu6Xkm3+aV7o46HHcFdF9bvQjSvXECGg13
WwAIppsCAwEAAaOCAocwggKDMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJT1v3Y3k
UigdvnIBXI07SBwlSl4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCBkQYDVR0RBIGJMIGGghJnYWxscnkubWFya3Vza28u
Y2iCFmtvY2guaGFzLmVub3VnaC5jb2ZmZWWCC21hcmt1c2tvLmNoghFwYXN0ci5t
YXJrdXNrby5jaIISc2VzYW1lLm1hcmt1c2tvLmNoghNzdGFsa21lLm1hcmt1c2tv
LmNogg93d3cubWFya3Vza28uY2gwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYG
CysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy
eXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBv
bmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBp
biBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBh
dCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0B
AQsFAAOCAQEAMXmZP7QQrYlhbA0LjcfNDSj2w12otipI3XbX7lrrfKOM6cH9up1n
UU1ZPuZAPQ+bvVWFn7clc/6suv30c5Hy5voJe8ldx3qKqEH8gDDAul7oZP7Pb5ml
WRVFeTGF7pO71lBPAU5g5RXq1IB7UFg7bl1bt0W6s354SruQok1SKAN9xRp8ResU
JRzVgSQY2h7Ss8l8FUp0BR3uUYpWs+nH6sb3friTR9r6BeaBwZA0I9e2l9KbrC/w
figOcZmayR0E7DBU5hkcQbafEDcU2BLHpJt1M0zU/mfeWKDk9ad569ntav1Yh+yh
7RBpcDv4MmhC1DWBg1VzAeW0VbdG82Rh3w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312512089304801399434327149934178013852888
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-12 11:03:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-12 11:03:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'markusko.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694563982697499301902561073830567437427482804865081561155641752337673215581093771268969437233200215361589230706939106918811553210775792009467199750202860426390924083585583536151784040806534634910415299744669487446284592611614994420672652281232335621909819482054981931082727959585660345697238336027071457521553222231759068931010813225955682582392949006927830877881990960485807509513307032017935709045415062723183534147581023034331421085160295797479727523962476528855921342252349003332161416963634982710632180598585698089549726164425419925441038700262637071610054873323178234823017993763884021807966273871890109569014759741600418778748816664862309517105563286350113926193490814593959042927507105832489167058289957518691519077170171255727423735531900721356719498407006008991509141312074256276134637803111631999611943111749849474181621343836047284708512579782677668912565180652692159936807922611430989057331438922634139852550321116244119840600660850794311011331803521871328663459966441942991329448015909034912221485618730492243308146133265837699342187411775686133576485536776693973700806848271429016080679032049828661538516210566420407110845259867199154072415243633162474216399849743250872037206559950637047756007978423456397882045277851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							253d6fdd8de452281dbe72015c8d3b481c254a5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallry.markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koch.has.enough.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastr.markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesame.markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stalkme.markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markusko.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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