env-9258023.jcloud.ik-server.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a7:9c:a7:7d:62:20:eb:a4:81:23:b3:ff:98:79:cf:82:53 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=env-9258023.jcloud.ik-server.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a7:9c:a7:7d:62:20:eb:a4:81:23:b3:ff:98:79:cf:82:53
Serial Number (int): 318372242295071034308231122857595807695443
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f3:b7:03:9a:b0:db:52:60:3f:b7:cb:36:ed:da:94:01:61:56:a6:54
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 54:44:f7:06:f9:de:e6:09:19:d5:b8:8a:02:a4:7f:2f:e7:63:db:06
Fingerprint (sha256): 7d:37:1a:1d:d6:b6:f1:50:7e:63:ad:19:64:54:63:bc:45:0d:05:97:79:a6:70:08:98:43:4b:60:5b:c2:94:e5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate env-9258023.jcloud.ik-server.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for env-9258023.jcloud.ik-server.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

env-9258023.jcloud.ik-server.com
teacher-switch.ch
teacher-switch.li
teacherswitch.ch
teacherswitch.li

Other certificates including the domain name env-9258023.jcloud.ik-server.com

(limited to 100 certificates)
env-9258023.jcloud.ik-server.com
env-9258023.jcloud.ik-server.com
env-9258023.jcloud.ik-server.com
env-9258023.jcloud.ik-server.com

Certificate

The complete raw certificate details for env-9258023.jcloud.ik-server.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgaNEBPGlVY/4hDBQXy2
3cMXx8wt8Chu6NQn9c0O0AV1Zk5S22kaFEtRxV7vxQ9C/OcfcfwmAXv3pgsECSTj
8qJwYyyDsYqTuAd7NQvt47ZxGRrA7YTszpLIWRrbwsyPx13PTEBn0MAOzkxSd/gq
2xiJMpB9Ey+7SDTodo1Yo2Wu0Q1z6+9Sgrb8HFrQXH3aQTdo+N3vZv/fWT/EyQ20
hn3VkKYA635s2Wf/mf8k4CACT0TYZCIpzwXqpniaH1i5EnThMTHhAo7QE5D3dpB9
sqvVrANETgruMl6/Ai/hJqtBsYK2B9QtGyaqocXD25DERA2JOiII2p3ebXGR9mw7
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318372242295071034308231122857595807695443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 09:02:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 09:02:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'env-9258023.jcloud.ik-server.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22473648715559615622869128713107028259134469513711587559592065121215785583755291007705663851168010996803460651198219029542849830539671804485768730672223051941701332787438947449828391482639374183427473576572050986734513153436653819946247531869815906543235841123445547722242317772523080184916923551495187055034944264160232117888898831652817094619757035248818183501368236464493285854183380232185820660892846280816778174113218500690091069496045683863111902807414095665844969090515501894564905188616789038461604186550315448308738810601112046020912636934347267861793941762642437064838596607499904015588116606992121485605861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3b7039ab0db52603fb7cb36edda94016156a654
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'env-9258023.jcloud.ik-server.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacher-switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacher-switch.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacherswitch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacherswitch.li'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f768d476b000004030047304502210097a0f89ad0eadf0d5f129bb79c55c38d86c916595d53f819f460f4fecb18ade1022035170198a7301542b18fb1da052ca1a6590a76b995b3a16aae2c59dc6ea8206f00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f768d47ad000004030046304402204e515af58be1b4c9d8c1335e4d75aed523999a62d6b6229d21203b50d0f03b2f0220633e7f831c055cd82a60ba22c6f8e2fda2583482f38452fd4c7de03ab8e4e1ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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