projet-stoa.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:d1:31:61:0c:e7:63:8a:0b:80:97:10:4d:20:51:c8:2c was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=projet-stoa.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:d1:31:61:0c:e7:63:8a:0b:80:97:10:4d:20:51:c8:2c
Serial Number (int): 325928290185419306035647023428794148046892
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:95:33:33:b3:03:3c:83:1f:7f:0a:bf:e6:47:84:37:b5:4a:b1:c3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d8:9a:b5:90:b1:dc:04:7e:cc:21:60:72:61:dc:08:10:19:26:24:82
Fingerprint (sha256): 80:fe:26:05:50:64:b0:b8:18:61:68:c3:b7:4f:10:49:b0:fc:6a:4c:c8:d5:a5:9a:f1:9b:50:1b:e7:54:5e:fe

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate projet-stoa.ch

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for projet-stoa.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

compagnie-stoa.ch
projet-stoa.ch
www.compagnie-stoa.ch
www.projet-stoa.ch

Other certificates including the domain name projet-stoa.ch

(limited to 100 certificates)
projet-stoa.ch
sni.cloudflaressl.com
projet-stoa.ch
projet-stoa.ch
projet-stoa.ch
projet-stoa.ch
projet-stoa.ch
projet-stoa.ch
projet-stoa.ch
projet-stoa.ch
projet-stoa.ch
projet-stoa.ch
projet-stoa.ch
projet-stoa.ch
projet-stoa.ch
projet-stoa.ch
projet-stoa.ch

Certificate

The complete raw certificate details for projet-stoa.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYwQN+WcSh08PJO4YzQ6
YV7aJbwoQa2WYYdRaultSYyBclvY78rVH9QPmSxlYAgMmq3JjvcdSsmugHsQBuVO
DDfLEE2IX+Syf5s0LNMNTNhcj1gq6Aaqh1dQ7Vp1oJ8Y0HGfB/LxJX1Aw+THFkRt
ESgTbVaD7CaGKJdiuEwYevfyD+ED+X/IJIdmUBiuEZc7LgW7jP9ZRnZ4KBerMgn1
P2ti4oN/iLje0tA1p4fL6cbggcGuY5IGJoXUNFtCDrUiS9X63XZF2frzVrZ48YbJ
xtEaFhvnqc/WEiV6Yg0tmFQsg+7Zken0zs1TGK6J3gvd0Q/4Qxa3OV4KVA0+dhrW
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325928290185419306035647023428794148046892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 03:04:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 03:04:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'projet-stoa.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24433060671966459077420482938048243911040055880609933545551052872887894059868384850288202491764122129010827167463136746539614395786133569928189267570646613448487706403087516992646203829323524044649051838180074860182326579788334763569761077140693858054217756884445065656194204573598610122566080948916142246710670696177856736593431223393952955332903826056027704648786948442659058872783523349877834079933208394570385860637492239820294857586119407168161325696254775263062722684959398338842093642372002814377906798265094220160420089378270594965328522909849355545914922996025267283861036240082919857842213979908576735057461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40953333b3033c831f7f0abfe6478437b54ab1c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compagnie-stoa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projet-stoa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compagnie-stoa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.projet-stoa.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e15afd2770000040300483046022100d114d2c5dced3f19be5e59cae033a80fd69f151a7d02a0d4b8c8d831ef4d6d7f02210088eed5a358d2bcae656d0604fc7a6aa8a0063265777f3658db462c48b2555b3e007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e15afd24e0000040300473045022100a5a176081ec9a1cc938778af9421a8890501f5036495a7a4d490721a18d752180220240c97519b2e84e93e60ee5d6515a6fe75c8b112b66971881c16d730f9458a54
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0086971bdc3ad1874429e2033d7465b996631d5a154d6a248d27d042ea7990ad5a840cfe77741dcf55652b0ac546220f3188f93759b25697c72e1a8b695264d656119126415912eed4abc5d60a2981df2463d084ccd8dc62b72aaaf4eeff7dbc642eab523316ee1937fc27645a1561444ac71b26358f112925b284e34e26bc5fa546972c7a9fa0b6926b5e747358f072a5bc8c85118aef65a2bffea6f310653ae2d0759b99b1511281eb8a6d77995eac923dc5fa724a0f3cee3872d1ff74f078216e637c79d61424cf1202b334885133ee3aa055d4edd8c936387453fbf5555ed85f914f622e0033f95e5a3a8cab89ef03056a33ca24b0703aa08b7f9dc68bca4e