fvsg.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:2d:d6:86:0c:4d:50:8e:36:83:ea:68:9a:5e:af:05:ca:da was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fvsg.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:d6:86:0c:4d:50:8e:36:83:ea:68:9a:5e:af:05:ca:da
Serial Number (int): 276934715115114400942538890073097055357658
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:aa:10:f4:e3:58:9a:ce:09:77:45:aa:93:63:91:e9:48:ce:11:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0a:fe:92:8f:cf:9a:47:10:ef:32:47:b7:e8:ce:33:04:db:09:36:cb
Fingerprint (sha256): 88:7a:8a:82:3c:b4:01:08:13:1b:0c:b4:77:f9:50:85:0d:27:5e:b3:54:ba:47:20:0e:e6:8f:d5:2f:2b:a0:38

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fvsg.ch

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fvsg.ch

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fvsg.ch
new.fvsg.ch
test.fvsg.ch
www.fvsg.ch
www.new.fvsg.ch
www.test.fvsg.ch

Other certificates including the domain name fvsg.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for fvsg.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276934715115114400942538890073097055357658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 22:44:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 22:44:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fvsg.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3364742968816780081849316492147663019692297304523758668988436430645378063668366350191223781681281727861195928980976200888482308255984443172008461322041754806720978799616576088936650890129210814854737606760790232372130694644136923025361127837602849980570736044633154646437161191137331943233663610234419563309397525756885439335468743341837001276588445354007152949857809627589790429741098196089551621995919392612317373091777851060502586503272204168667338772896636382668117653496673538994109454781764345843367561967994861955331880845452974660985124185787575492543876473456748063682916534981242215839793830888177664259004470046159468977764771667191764961115310719379749738786514985284966256986968722883444164640213246875979163889374997435428106874103720599754929207268516109583171557682504242466405130674553133511733689250691296092658184247889536135576210665036192704816833948963241691181546536996625825122655667599691000109850259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffaa10f4e3589ace097745aa936391e948ce1157
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fvsg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.fvsg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.fvsg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fvsg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.new.fvsg.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.fvsg.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018947579aea000004030046304402205fba323e8af0ef190ad8bcee4a946ebfe85a2ea4b78f0b7c14bee6f6ac18d42802204b2c6374e98f25ed1a0517f4269d28c155b3c440be9b9c7429ed50f7a7f70139007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018947579af3000004030046304402206b88719edcfdb25250fe12d949af8cb82596aa824e3d729d20b3f8df418507fe022022f64bcb33c17995a7b994a28925ce131cfd82a12206e8c263904d274cfeaba1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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