energiewelt.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1d:50:3c:59:ed:59:a8:ca:d3:42:78:b1:8f:aa:3c:d0:7e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=energiewelt.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1d:50:3c:59:ed:59:a8:ca:d3:42:78:b1:8f:aa:3c:d0:7e
Serial Number (int): 358423983969161784850529671042702595903614
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8a:6a:65:b3:e0:a8:bf:5f:ce:3f:af:aa:e2:20:7f:fd:92:14:f2:18
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:22:09:20:6c:30:62:4b:d7:4f:ca:61:36:c1:61:17:7d:ed:36:69
Fingerprint (sha256): 79:82:02:94:77:0e:75:f6:3f:02:d7:5a:ce:01:c7:6b:0a:84:aa:16:13:ab:dc:c7:af:58:3a:0a:1b:30:dc:30

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate energiewelt.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for energiewelt.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

energiewelt.ch

Other certificates including the domain name energiewelt.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for energiewelt.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358423983969161784850529671042702595903614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 04:31:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-28 04:31:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'energiewelt.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 954215053041507374087155639653690241414010151311738643265599890445169925660525880598334434082640561944511912560639443251605885193465991512331134960477008765156262541503732223808680570149875610422327028965187273778011934400135792963648657094879869030747489601574942153229277153843289209605295886023079652467141402134764591272566522359327970088502570489187213505924762619623393749891957580050743727277628835989869527873922145353861871450469068200079838276054547815885490243309241680243010049839645435206189666191681726117978709203173014140987374552425762071649767997205259165809331036538569594287335430949445072578618684870400957250307076129113460567348315864746575072232903073667914926817649425042110864423739577242939306790731641442393957830762273969264097303345084052849688280911744092963671167893549405199506505676247538468836596243910837437869676771972065889280918806075007387064594268624697402269355751286844711416181797528839900525675241428167625432401865525575530847166266975465190504608185721551592934875480397798605986009719534646869266619107768377277313213967900673247260519280090859491441704288243683281399720721196521214148797586501262242471506051727149733894881326411682569466079208429164368159499639388198115050568235293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a6a65b3e0a8bf5fce3fafaae2207ffd9214f218
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiewelt.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001708a47b4b7000004030048304602210095d18bba571535c64d159d2414af7c1c2a196e5f8eea8e5a7a8a6c936996dfdc022100c2b957257a35cfe1c1593956629b753fa91a18bf0e638da8bf96bb07ecb63443007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001708a47b4a90000040300473045022017c6361294d45a138dd9c2605d91371ecb69a139df04e3264d09794467525018022100ab31e9d597429715822efc86df43b61cc58113201420d5b9b6e395d97aa2dd28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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