tdh-valais.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:02:df:9f:60:3a:f9:79:d3:80:01:3d:b1:5a:83:2f:b9:1f was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tdh-valais.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:02:df:9f:60:3a:f9:79:d3:80:01:3d:b1:5a:83:2f:b9:1f
Serial Number (int): 349426953830927171213310813669457216387359
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3f:bb:43:6e:94:93:11:b2:8a:9c:72:a3:8e:df:c7:10:13:e6:20:f8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:46:3e:31:d7:64:98:f5:8b:cd:51:7c:d6:7b:5c:7f:0c:25:e8:30
Fingerprint (sha256): 7f:3b:47:2a:16:40:f8:7b:b6:c7:bb:aa:cf:ed:5b:2c:58:3e:cb:c6:4b:71:0c:42:60:65:e0:48:de:70:30:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tdh-valais.ch

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tdh-valais.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tdh-valais.ch
tdhvalais.ch
www.tdh-valais.ch
www.tdhvalais.ch

Other certificates including the domain name tdh-valais.ch

(limited to 100 certificates)
events.beymedias.net
portal.perfusionsakademie.de
portal.perfusionsakademie.de
whatsappday.whatsapping.org
events.geocat.net
events.wep.org
dons2018.tdh-valais.ch
tdh-valais.ch
clients.ndigo.be
events.beymedias.net
2023.ibizamicesummit.com
agenda.pmc.nl
ims2023.ibizamicesummit.com
clients.ndigo.be
tdh-valais.ch
tdh-valais.ch
clients.ndigo.be
clients.ndigo.be
www.acusticaytecnologia.com
tdh-valais.ch
dons2018.tdh-valais.ch
tdh-valais.ch
dons2018.tdh-valais.ch
veranstaltung.hebammenverband.de
greeneco-air-gf.sunapps.fr
www.amz-online-summit.com
eventos.neurosenser.com
2023.ibizamicesummit.com
tdh-valais.ch
clients.ndigo.be
veranstaltung.hebammenverband.de
eventos.neurosenser.com
agenda.pmc.nl
2023.ibizamicesummit.com
events.wj-dachau.de
ims2023.ibizamicesummit.com
clients.ndigo.be
tdh-valais.ch
www.amz-online-summit.com
events.wj-dachau.de
tdh-valais.ch
events.digiseed.de
www.acusticaytecnologia.com
events.tdh-valais.ch
agenda.pmc.nl
clients.ndigo.be
events.wep.org
clients.ndigo.be
agenda.pmc.nl
tdh-valais.ch
eventos.neurosenser.com
events.tdh-valais.ch
whatsappday.whatsapping.org
tdh-valais.ch
tdh-valais.ch
agenda.pmc.nl
events.beymedias.net
whatsappday.whatsapping.org
tdh-valais.ch
clients.ndigo.be
festival.educatefor.life
events.wep.org
tdh-valais.ch
hrevolution.charismaschmiede.de
whatsappday.whatsapping.org
agenda.pmc.nl
hrevolution.charismaschmiede.de
tdh-valais.ch
agenda.pmc.nl
events.geocat.net
dons2018.tdh-valais.ch
portal.perfusionsakademie.de
hrevolution.charismaschmiede.de
clients.ndigo.be
events.wj-dachau.de
ims2023.ibizamicesummit.com
ims2023.ibizamicesummit.com
sachkunde.perfusionsakademie.de
tdh-valais.ch
tdh-valais.ch
dons2018.tdh-valais.ch
events.wep.org
events.netwarx.com
clients.ndigo.be
eventos.neurosenser.com
2023.ibizamicesummit.com
events.geocat.net
www.amz-online-summit.com
dons2018.tdh-valais.ch
whatsappday.whatsapping.org
festival.educatefor.life
tdh-valais.ch
whatsappday.whatsapping.org
agenda.pmc.nl
www.acusticaytecnologia.com
whatsappday.whatsapping.org
sachkunde.perfusionsakademie.de
clients.ndigo.be
clients.ndigo.be
whatsappday.whatsapping.org

Certificate

The complete raw certificate details for tdh-valais.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dz3jlevbMMLTyCqB4Mw
RCiMQK67R4gK2Eupd1cPHpdF+F9/NZZONXKlgwZW5zjB74yDfl8NldgN7llzYfut
8gGxF0dKDzSq+7P0OryfxvY18shcfCcnNMKeZY8vHznX8lkZLFrYyy+k06Ay2YRh
7Qh1kS3T36HaLB60gVlmU0wJqis8SXVgoF4yQQEt6D8U105lO9i+UoyMNAp15QVP
Uz4hBrQMdKVc0HBgVETCpyUCXy1nQSCk/Z508oHKfE1Z+4Im247HVQB7mPqtCEwV
UJBxgBlpDg8PDQRq23gV5vK0fAiuI8KqtZ+rPP6FMtisC9CDMBPkMRkVuSUIfeYP
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349426953830927171213310813669457216387359
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-29 21:02:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-29 21:02:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tdh-valais.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28007628294055473890766459424858278748722533794667199983087544789423058271200686876216506789966363771082989094135569863646095431974661121646320190013131654952767182177309548187754457601100255975126251883645185475216386164555332860968648614639776702633182642112985045277011596895175723375179421443391703725340481823581963817778517207801542555854771001080859101147233455260676366476655979848606481139122166412296935799538447187121863497196653474558576091123754194116366799461814266751349821345570446672741670386005941403365725761264418081167636520558984613636825378342648802135837821200688692942930136909205471985274747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3fbb436e949311b28a9c72a38edfc71013e620f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdh-valais.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdhvalais.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tdh-valais.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tdhvalais.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185ff8d7f050000040300483046022100874ddda2adb92964d407eb38cd7573ae2b31581c1d834767068d8a0e37c3c1c602210097d56590b2ce3633fcc57443e5c2914618c8d76509a1f3948b9da7da0d324f64007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000185ff8d7f6d000004030046304402203b75f0c3b589b445f04050f69a4db28c86e32a63c6d38085fdc6a89bc359747102207ceeec8a15645df89fe7b2b893c5343c26c8162d365db03b2aafddeb82a2b4dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002f4ead1e027a4aa4b61f688f2bbe1df82700e2691d7a72b0005960617e9a62e66c4c817b6d00bcdbe29d2653d389d29779af60ed9220f25b92339d79deb969a0b66ae77d88ba55d636a67d7221b805633981541aa236ecc9bf7ec71dcc7afcb9c1d1c1bd87f55c97cdf08fff7ac403c1d4ee0a9068981d5a38e03272457073fcb704f94a68f21209825ad986dbd914bbeef014d7edeb70d4c592b56cc7a4a633ee0ed04647dac61f6a0e2ede815734a9c77293c9c6d6aef8d7783f7fbaa6e1f749e766067865da68a5482f73972fc74e446beed260a6de141ecb01404988c6de87e3ccbca7ed134da0da41adac1e57da0c25a8c3b6e07eeb32c02da6ff10a740