lemeilleurde.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:82:13:07:ba:9a:48:07:32:38:2f:b1:81:2b:0c:96:29:64 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lemeilleurde.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:82:13:07:ba:9a:48:07:32:38:2f:b1:81:2b:0c:96:29:64
Serial Number (int): 305598860957752278262239028993916950423908
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:de:f1:81:f3:20:58:a1:5e:e6:52:f8:89:43:31:da:1c:0a:31:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:b5:dd:ae:a5:62:dc:c7:df:4a:91:a2:36:d8:59:3b:50:2e:7e:7e
Fingerprint (sha256): 91:dc:e0:a8:2f:dd:0b:94:4e:76:dc:7a:68:c7:a2:91:a9:f7:21:ec:8b:1d:69:1e:35:c0:9f:79:ea:90:80:91

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lemeilleurde.ch

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lemeilleurde.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

billetterie.lemeilleurde.ch
lemeilleurde.ch
mdw.lemeilleurde.ch
www.lemeilleurde.ch

Other certificates including the domain name lemeilleurde.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for lemeilleurde.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5syP8ucn1BCITt+cuS1r
rA8DAXWLcKxT3QOnR42AKlmzWjAkBmJRboXn9b5PJIUbaqF0EePVbcviywmd5d9x
AhNFzlcK3iDlXJccmMHopHCGll2To0MjbbOjkfAbLOyzmUzUZ7PzYG04xUMnW5uk
KbS42ULTmagSe9E5OZ8wIE3x36k5IC+5FiJ+mK7REPVEPojuFS55nTB+pdxAHshE
Gs5KgQPljwJ6Cgw7f/1SVmwd7W5vff5NeZpgOJKxkozAljPOZUCUixcndpQtr0Ie
6oY0ddwNmjPIWSvhgKcw4DdfhQ1RS6UjFIdc1WzID8oxINRcvalDNEoYBLWcKlvX
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305598860957752278262239028993916950423908
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 00:10:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-19 00:10:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lemeilleurde.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29135683572004079227889598050663051535818618558229489307793178330548080841237016699320472558585223666678864418115424814497168210591573040411685778444870018823441822986307803857713744532060949346161640761915815770666492183422112925325355619836145356797566314148357978708805308963987584285813239068283784113429146615453928084541881134079162493770617810421829311889271576210599092016407575443253850250133404457097340551601936624479796150862060712783627000641668768317403628143277335178309242528065565579391725941197523646938269494912370042123523476105525543179593876432207159213589514995763454193419404919478040783476527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cdef181f32058a15ee652f8894331da1c0a3173
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billetterie.lemeilleurde.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemeilleurde.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdw.lemeilleurde.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemeilleurde.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016debdd6eb40000040300473045022003ac2305f5d36c2f8e1a10204b21a1891e01fbf9ac5e7e27a761a8decbbe8341022100e1cd3b2b6101669f48738e4ed23422c91ec9dfff8549afe3683101c3bf9f1a02007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016debdd70ab0000040300473045022031550238a321b45f412d5091e729ab77a6d76cd12556959bfba863ff423905f60221008031ad90b8af4e370de8e234496338adf3d40a65ee9c222de0794758b72b46ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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