www.honegger.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:f0:60:0a:ab:f7:83:80:cb:10:b5:cf:33:59:1e:9a:6a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.honegger.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:f0:60:0a:ab:f7:83:80:cb:10:b5:cf:33:59:1e:9a:6a
Serial Number (int): 325969738539273622288771702601254965254762
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4b:0e:28:89:d9:8e:4d:e6:bd:10:ee:45:10:29:96:12:d3:7d:7f:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:ef:57:ca:40:f0:bc:45:e2:d6:05:7b:e4:76:04:9b:65:2a:12:4c
Fingerprint (sha256): 89:ba:0b:2d:c1:5a:22:82:e6:f5:52:41:3d:be:00:d3:1a:90:9c:db:7d:5d:41:d6:60:09:de:9e:22:f5:ff:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.honegger.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.honegger.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.honegger.ch

Other certificates including the domain name honegger.ch

(limited to 100 certificates)
honegger.ch
itstatus.honegger.ch
www.honegger.ch
owa.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
www.honegger.ch
honegger.ch
honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
itstatus.honegger.ch
citrix.honegger.ch
www.honegger.ch
*.honegger.ch
itstatus.honegger.ch
honegger.ch
owa.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
*.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
honegger.ch
www.honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
owa.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
*.honegger.ch
itstatus.honegger.ch
go.honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch

Certificate

The complete raw certificate details for www.honegger.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325969738539273622288771702601254965254762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 19:55:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 19:55:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.honegger.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765818570151619250160512882863494367183127792884041382042170080046322162371266754878198261195180907810276243109437147132462610820847472677185999872753946333061886701226431996367393584634346353579944331487096744193643242820446752761351975387720294580382877815373341885088815228346212305678657950381316246550934993149983908349401964476716323660424643374582587395781609444278908266923279450166753848106442886678518782456092492102037751187994139922541098271054613247693887577394115452610965619160927886544158966691006552553886801206624924405229480370099157983705322759408690394343828019313681488598527185422977846290419478888681729046947978125990803212369312966708377870222791478042733769673443379767105718122396552186583414214436020985992589932621029030541480518859116013349602551213214031115260267671907772329463125202562186894998148848659998118095075420652128940533654104361600694244819233014630584102768303148031530497209796028529353016012906570595505612844173657914102531752939732837815428918658769429272747630613150200907656670176205268332333367871492109566139433781496381235038886603961961512254562022053062992141397578433432378253109622550504390973057198285735399504650085978862981408058934615731947641279221041937672832114475041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b0e2889d98e4de6bd10ee4510299612d37d7f3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honegger.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ff83cb0f9000004030047304502201ceda1866754fb0388d4746ffad8f960cbab98340a65bd8b679d35c3376c8b7f022100df211aaa5b31f220c31bc2f549f756fa78de4712fb966c4fe60d588079fd91a80075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ff83cb132000004030046304402202fdb6cdd3a2f806a7f927e580d5d8ff3210e261d29be8fc3ad9845b73377e02d02203c2f5f3f9e97770add02593b9a7339a08d825c30ac0c1f2c88d4cf7851f4d7a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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