auditmanager.mitreva.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:b4:72:09:9b:d6:d7:a8:ad:ec:5b:60:b4:e6:04:81:e3:8b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=auditmanager.mitreva.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:72:09:9b:d6:d7:a8:ad:ec:5b:60:b4:e6:04:81:e3:8b
Serial Number (int): 322739265724035929128279004628374022906763
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 01:96:2d:06:4b:fc:d4:52:c7:e7:6f:75:0b:9a:ed:61:9b:cf:a6:61
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:66:36:75:01:51:e7:80:07:5f:ad:05:e3:1b:3f:a8:4f:0d:59:e0
Fingerprint (sha256): 78:8c:a0:9b:00:6f:13:12:42:37:1e:c0:ec:01:32:ea:c7:de:e9:9f:e9:47:5b:5f:c3:42:19:44:ae:22:73:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate auditmanager.mitreva.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auditmanager.mitreva.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auditmanager.mitreva.ch

Other certificates including the domain name mitreva.ch

(limited to 100 certificates)
www.mitreva.ch
i-world.mitreva.ch
sip.m-workplace.net
www.mitreva.ch
sip.m-workplace.net
auditmanager-test.mitreva.ch
mitreva.ch
auditmanager-test.mitreva.ch
admin.mitreva.ch
auditmanager-test.mitreva.ch
sip.m-workplace.net
i-world.mitreva.ch
sip.m-workplace.net
i-world.mitreva.ch
sip.m-workplace.net
auditmanager.mitreva.ch
www.mitreva.ch
auditmanager.mitreva.ch
auditmanager.mitreva.ch
am-test.mitreva.ch
auditmanager.mitreva.ch
sip.migros.ch
auditmanager.mitreva.ch
auditmanager.mitreva.ch
i-world.mitreva.ch
lyncdiscover.m-workplace.net
sip.m-workplace.net
auditmanager.mitreva.ch
lync.m-workplace.net
i-world.mitreva.ch
i-world.mitreva.ch
admin.mitreva.ch
mitreva.ch
am.mitreva.ch
sip.m-workplace.net
sip.m-workplace.net

Certificate

The complete raw certificate details for auditmanager.mitreva.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WEYF3NsMKKBnS6ZOwNc
s+jPtPF3YquOBTVAwFWTOLmwrFU36nyTaCdoPv3FWuhKBDA5ExoUckGN5JuV4jRs
419pKnJa7qBEeidJbWml4svx7I7SeFvhLn3+fkXQXiwxeOLgBb0TCghVCfDbV7b7
Nn/pSSFMwKnLfRDseD3RgkvKoJENRn/eu5ankiDJRglvjc09d9kYOiAjTtUQGYTt
N+ypTh6dxO5vdnfkj8o1nZEwjRz8lNHvCrmSNefE/uZEIzJ/Bugfg6GsvE+TGd52
U1b2SYTUfXBBn8tf/XkRu2WYUO45P3OCQp9OEZ3nbu7dp6zUqu4ZBCKfBvmvEQ+Q
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322739265724035929128279004628374022906763
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 09:23:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 09:23:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auditmanager.mitreva.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29966357165998422013870795616249172302959512547140784374482433341249216187289191108014534432393144097753182966846542242237176711349831313021380538043722576539040907167812957523523777899890235531400969472049111910017556155659635237296419112735902456300472376506643619455130777786790663224971786883848878488376468019271246031161764151240235731893500966019052239191045831848273711842853202553771405095165738045656622528261829086558559656585370456500421516254523218025639875253303432643775737672480141160960887441966287556190842609954226450477314677186919676928537089718447761339229429406513545647925792888138324455166083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01962d064bfcd452c7e76f750b9aed619bcfa661
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditmanager.mitreva.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018991b976210000040300463044022062a6bd83276fec09bfe1c50e019b43c1e8914e848551b788f25b7dd464a967a702202e495fa4a8096af8cd469eb961fab1e0b94b33df42be06cb761183476e3f4830007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018991b97650000004030047304502204da5de4a312e41764de2dc4af923622b165443deb2d14f8b8027c32792d1b536022100ce0b8824f505732528bc3b17a42e843627b4d8bb4c4dd694f5ff98ba8ad00388
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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