www.ethi-durable.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2a:15:8a:ec:6f:be:0e:dd:54:98:88:f1:cf:3a:b3:9f:20 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ethi-durable.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2a:15:8a:ec:6f:be:0e:dd:54:98:88:f1:cf:3a:b3:9f:20
Serial Number (int): 275657352326339929067785751385938544795424
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:ac:d4:c3:e4:3a:2f:30:0b:e8:66:ca:73:1a:26:6f:ec:a7:35:43
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 68:4f:7d:37:a4:5e:3d:98:29:75:83:0a:41:05:22:94:30:85:82:6a
Fingerprint (sha256): 80:e6:b4:62:f8:a3:f8:26:a5:19:b8:60:8c:67:11:f1:95:3f:dc:28:8e:f4:3c:49:50:5b:49:4a:83:9e:a9:d2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ethi-durable.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ethi-durable.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ethi-durable.ch

Other certificates including the domain name ethi-durable.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ethi-durable.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqByvjZ4zK6fcwFtpB7of
jN+pehx8A3J5CnVME9w4jtrUhC8QuNpuLxNjuI0FIVYUWX2xa0yHxNzBLzqcFmhm
wfHTkInmYstXTL8CBE9XLhQdw0kj+D0dZZ0Ak9Y64t9foCNs/5+jqjd7/r+W8B0b
g3z4oyx6OEWPcVnSd06viSEECAMqaN7e9S2HOecTrr/ZhDaJRRAJ2KNt0yHFq+z3
E6pgEAA4PErSnJc6v7DOQ6ufeMu3rNgYdv2rIseJu+a+1vw+PAtIbu6jCPgULhcI
ejIWPtSVCYLqIqsuKrpkyiZuZkREVNeScdG40Q9gE87gqqwHKTxM9fWFbVYn7nkT
vWstZk/z4NvFMmAkphETH0E7j5jz7V8CxQREtOb10gHBSxVfg4Nl/GMwMsMXlx7y
bZMxMNh2NNxt2gSZuWsByq20q5K5zR6rY2kZJR5wIVJvUh4okh/97ed9c+skRP1Z
8gTfbqaxOnTXtks//rk51nPREiTE1au5nDNqby5iAyTL3bkOiPMi9dpVAjU3kca+
YmpxxdgK5uJCc0JtnDkrLAo2rpqWslf1PzpaOf7niN1jRikGL3sZZt9KODA+KMNc
z2PRmirZpgI7diMVVqea4pzeKLUPOw+fxtOPpo5xncnj3D6g1sh5ACE6hdnjqsBq
r3eu1CNxSBcTcv8sM9WFMxcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275657352326339929067785751385938544795424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 19:09:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 19:09:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ethi-durable.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 685837342758908153196458161353003002675000940215438542554895650528275575080968045413976260744998570957644747943908525880523497220687340606792831726674424590048730605572498611745557011129371303800053424893272494259102592116478415214478417861522365830400193264300251755225899374930121538406486782276183382934815350511987525334394955591522249081423431419084109846969328710594431317135249068429623648268518060001878287244645796621723757383668695319954017078745536804380800083102162596976621400013535874223521297828511738396746453762964602198656883777147611195561587771793392863727364417250772356641486206546431940224231013714126285372711599191397549206601028857979780110986036931674255039748812247999799537620155299701246502713333814823085019631693733112816300491490806803048873305408816861910192310239712876733969830180419030078681608755692314548261667865453621190892770184168356287018622217687776492164423882581171095729642372071098267921906341624834427684632120510210046131094713910078527758803634985716763145599315798751110134351817939598206500390318762746663917356795232001962078220347819088107136022057012516038591896155322285512855434113689940729160113706587798897116859020525175960195031960685044851230234040123397358894943908631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2acd4c3e43a2f300be866ca731a266feca73543
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ethi-durable.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f10544fe20000040300483046022100d0b8fb7774121a554ccfbda364c6ca7c34f2634b6c52e8190921fe0e3215c70a022100dacb7760ae618a6ba734efbc49cbd45b0347972ff101a10dfa4a41411ebfd9500075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f105450240000040300463044022074ca440af0d1299e47c96736ca135b3f969b647121ad534443b4fa5a6ed1c8000220361f5995d8ba26158543ad7f56fbd2d4e114f2907b30d96e12072af622aa7636
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0055e47e428f3a8ea626a6ab723cd662a1ced7f0dbc1a2cb712fad97458ec902be66cfefb70f99cc218f011050286c78e957e8f0ae4733bbb76f51e3d3be2b25ea7849dcc05e5cbf77a6cb069c60056e3516ade261fb58bfb1cca3c3b47536373cb6c4a0c60a82c5bc508ccbd02d19dab3eae99fb3d6b2cd853691e5e02eae5176991b58181b7de447289694057c6cf53d6e799171e2f93498204a6bd53b5aeaae4da48beb32a4c4a4d972379b37f9ded18ed5544808f35a8bef3d7a0fc3802d32236b9f498f694f1189c31b8c3e6612a69fbe35893726fb66bb2a92e4c938d9ebd84dbc03d9d816bcd8d20d5429e92d44af3c32c6b8b61488452d68b867d8fd5d