gayasoft.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3a:99:4b:e3:f6:79:f9:fc:ca:b1:c2:88:93:87:e4:3f:59 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gayasoft.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:99:4b:e3:f6:79:f9:fc:ca:b1:c2:88:93:87:e4:3f:59
Serial Number (int): 281277001005949510971304933022603520786265
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:e1:2e:63:81:a6:fb:36:fe:78:6e:25:70:3e:89:87:fe:8f:54:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 12:4e:f7:e5:ed:32:69:b5:28:63:46:c4:11:14:87:6e:3b:2e:96:28
Fingerprint (sha256): 80:b2:2c:b2:fd:92:48:93:64:b7:c7:7b:b7:71:26:ca:58:bc:3e:66:84:5e:01:99:83:bd:63:92:03:f0:8a:de

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gayasoft.ch

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gayasoft.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.gayasoft.ch
autodiscover.travelparrot.ch
cpanel.gayasoft.ch
cpanel.travelparrot.ch
gaya.gayasoft.on-rev.com
gayasoft.ch
img.gayasoft.net
legal.gayasoft.net
mail.gayasoft.ch
mail.gayasoft.net
mail.travelparrot.ch
travelparrot.ch
travelparrot.gayasoft.on-rev.com
webdisk.gayasoft.ch
webdisk.travelparrot.ch
webmail.gayasoft.ch
webmail.travelparrot.ch
www.gaya.gayasoft.on-rev.com
www.gayasoft.ch
www.img.gayasoft.net
www.legal.gayasoft.net
www.mail.gayasoft.net
www.travelparrot.ch
www.travelparrot.gayasoft.on-rev.com

Other certificates including the domain name gayasoft.ch

(limited to 100 certificates)
gayasoft.ch
sni10881.cloudflaressl.com
sni10881.cloudflaressl.com
www.gayasoft.ch
sni10881.cloudflaressl.com
gayasoft.ch
www.gayasoft.ch
sni10881.cloudflaressl.com
sni10881.cloudflaressl.com
sni10881.cloudflaressl.com
gayasoft.ch
sni10881.cloudflaressl.com
sni10881.cloudflaressl.com
gayasoft.ch
gayasoft.ch
sni10881.cloudflaressl.com
sni10881.cloudflaressl.com
www.gayasoft.ch
sni10881.cloudflaressl.com
www.gayasoft.ch
www.gayasoft.ch

Certificate

The complete raw certificate details for gayasoft.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EtNyobiMBocScONLXKZ
pjAxfOlAP7wB8Q0HXpqBc3lRv/AUujK0PMcblQ79mJQE6U3w2sPRUDqSWexmlE3E
5Z4iyjaN7WTcO7otU49WkRr/PLNuuoIuI0q6bcCHMTHC6OORpRFaRp9ygxfT+CI2
LddRtbgBeWFhAHXXTKbl75x7ue1BS29l4QiA4jA4m01bVl5iqV6U32OfC2U3awbS
IoZRbyKhzvd6SrOV0x+4NTyW+Lj0w17X4SiBkcThYyVTl7hbLtoWKgcXugmcUIpO
mYnv49JDQgyPIs0a4p9ECeHyDvhGVXp49GYDpONftG8Iz6L79aDveoDmZpHT2Cwe
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281277001005949510971304933022603520786265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 05:43:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 05:43:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gayasoft.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27809560815594447825864807885468522673267962936898069850661389660400928688858323757164814786080458849351517213503540633182792368723129227668680071436724047353348788998741976644662305444850529412625906935460793512360131354418618333830868417744861794588644383723790364379249198933915264221110013066352660904789662476085758434906816919551172960583640934109565554323130680827384228864320094898266340559515388626137049700504827749571951582187532791250759641167806779644666933912741644437051325368658601270272826988924652933478051924243415105479963910728196253039520809935854924650812773288593347492308828799194614308019771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6e12e6381a6fb36fe786e25703e8987fe8f54cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (558 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gayasoft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.travelparrot.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.gayasoft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.travelparrot.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaya.gayasoft.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayasoft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.gayasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal.gayasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gayasoft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gayasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.travelparrot.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelparrot.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelparrot.gayasoft.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.gayasoft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.travelparrot.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gayasoft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.travelparrot.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaya.gayasoft.on-rev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gayasoft.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.img.gayasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legal.gayasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mail.gayasoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelparrot.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelparrot.gayasoft.on-rev.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001673502cc5d0000040300483046022100aa187796d83be020d2e85739925e90d5272a98177d817114966308ec30e4aae5022100f7470248e7e431e1d0b67b66b6ea975eaa054548822d191410ea50507de9f9f7007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001673502ccad0000040300483046022100b989679265ff2b23892f46e26c7042a9b123d04598648d3e91d6d48448be7f76022100f816e65ab1787984d896fb2ca71cef8324649e7515f8a1e7a2ad24950393c52d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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