swisswatch.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e0:ee:a7:5c:4c:ff:48:98:0f:9b:d6:d9:24:b9:0a:62:a6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=swisswatch.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:ee:a7:5c:4c:ff:48:98:0f:9b:d6:d9:24:b9:0a:62:a6
Serial Number (int): 337877333234225171374921541110393981264550
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:d1:bc:7c:22:f9:b7:9f:a1:37:05:2b:e0:a9:48:4b:ec:da:be:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b6:dc:fe:da:7a:c8:0b:b0:1f:4a:06:0c:2a:b8:21:50:ff:86:2b:24
Fingerprint (sha256): 8d:04:d1:40:4c:e2:df:25:4d:8e:e5:1b:56:fd:8f:51:67:e3:58:e2:35:a1:6b:c1:bd:17:5d:f6:24:9a:16:ff

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate swisswatch.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for swisswatch.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

swisswatch.co

Other certificates including the domain name swisswatch.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for swisswatch.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2TC/ey2TCy7ChlHrtUfL
r6do9strfACRmJi9ySM0BE625I/1Yd19kSovXeVZ18l1LKtT+DUiG/TZhUFPYJ+J
CMPUl+EfGLNnvKV/lUl0o1wRxuFcL2o1Lm43s9GobA6VANVgDCCOSkVTEfzqTg+Z
N7miBmqfvZ9acOayFEm/FNAaL8UrVRTdxh/FYDcjS/3pYcHncLfCqUbtArVVXTUR
AM2qE9H/doVE4Imk/rhN3QncATGeetRBS9+tILf0jcTNyh6ItEezMBYHs7FR06jY
HLOzENHU3nDNtv212Bjbkc03J8cdFcdYarcQ7/eyMJh2kpG9qUplFOxi16w+ZQF3
RiOyLQkVViE3A1UOfNudjtbJFtRQNCfN7Wpkmt7/8loHLoeT5EZfE3APZU+fjU29
zfISxEoKk6tTtFE1q9TdvNfPxmVZB8xj7l070U61jU7j1I6VknO+uFYPwPln2kM6
mRf1ILS8SsVJ/NenFHz45tYukJlJZsvuKUS6URxiajWyDzMdD/ATgir9gOaX7pPn
L9/3pRw+E/VTkYZjx4AcodoXoGBvu9tilroKZI16DQyVsqupOVu9/Z4zyjJqpIO+
ktMl9OY9HQ03kqyr9hQ0XyEv0yIfDhxJdeczCYPYClTCIS86HmIVhzx89Ra4FUMv
YvT+LO5v3Nw3dXMTi0YHTn0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337877333234225171374921541110393981264550
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-28 21:12:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 21:12:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'swisswatch.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 886059615807598606579318008523058046817994711867339097512838050671578808283591427491611315467982542140939893038591461341807491192643102463720614172194729704077334118490107937388239253371327017728908759557987452387823898391377467894379649786508898020837642968435292262099568194868402131287101022918686740386686086824110017748305308129401815084231971251849459695370441702004192904010257126308278596326580175082082500120494492822282448496148388058221987472471640122141327282831823086934619149361932815544978930274771262578450780886279306208667283900244947997610461191486821490856221171035430461585986289285588269327135028495641068047355226114470734759229282854935492642476080081901490587907248757531570001279955525895667322815483523963585888463651251269724042324171443785033371632077353185182646179478872563616294047152497374241012953592241415074641877237203991421927248982353753897220335482208251979672423734827760522750682222490561807217266293282472134288436368940064385101204551856658459090340575119921808700687698191546028090799289066391672133166806104379271970639040051569285068083858301614943154709102357650565457796189745247524742434833371869910494607816990553376224995888373643818584020006961785499511275235400944663035407453821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1bd1bc7c22f9b79fa137052be0a9484becdabe85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisswatch.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ba025d5b60000040300483046022100aa26ca2b916517375e654638792069c69668b31722bff8f66ad4626fc36099ca022100d61fc07fa6bddcdbe73ffd5ad015c6036fc45ac12f18620cd1ef9a86796412e2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ba025d5b50000040300483046022100ffa924b7b69bbebf8b38853b71d15addc7244d5629be38d26de0739229e2b44f0221008b987a729eac5f7589196e3b08e4b456468c8c4e6035e7b21df0d41d7c461849
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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