stnikolaus-wohlen.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ad:39:f4:4f:ac:be:64:78:3d:0e:3d:48:ff:da:85:58:67 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stnikolaus-wohlen.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ad:39:f4:4f:ac:be:64:78:3d:0e:3d:48:ff:da:85:58:67
Serial Number (int): 320282741804792843074926086010139325061223
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:9d:67:5d:9a:66:00:ea:f7:cc:f6:a7:7c:04:52:91:66:41:09:db
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:ca:cb:b0:9a:94:ff:cb:43:ae:4c:c0:3a:4c:38:ff:4c:40:57:94
Fingerprint (sha256): 92:6b:b0:73:e7:5b:48:19:e5:cb:cd:49:5e:45:d7:eb:ad:b6:10:96:61:cc:f5:e3:17:02:70:bf:f9:7f:b0:07

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stnikolaus-wohlen.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stnikolaus-wohlen.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stnikolaus-wohlen.ch
www.stnikolaus-wohlen.ch

Other certificates including the domain name stnikolaus-wohlen.ch

(limited to 100 certificates)
stnikolaus-wohlen.ch
thrn.co
billing-dev.cloud.ikala.tv
wildsolutions.pl
z-dom-stnikolaus.davesblog.ch
www.amifashionbaby.com
freemarket.fr
stnikolaus-wohlen.ch
salem.bookdroptaxi.com
stnikolaus-wohlen.ch
stnikolaus-wohlen.ch
stnikolaus-wohlen.ch
metiermoney.com
stnikolaus-wohlen.ch
rn-md-favorite-places-terms-and-conditions.mohammed-najib.me
radar-demo.anoff.io
schichtplaner.app
bimavima.com
stnikolaus-wohlen.ch
hennings.com.au
prod-horizon.static.securetheorem.com
api2.laser-ey.es
www.jordanmihlali.dev
carolinapacheco.tourinmobiliarioflorida.com
www.tryconfident.com
dev.maledifresh.co.za
sadiqqara.com
www.sanicafe.com.au
z-dom-stnikolaus.davesblog.ch
m.nissansthyacinthe.com
mc-summits.com
stnikolaus-wohlen.ch
stnikolaus-wohlen.ch
sambender.net
www.ewoud.dev
www.sheremetiev.pro
offscore.band
luminescence-uk.com
test-santacloud.stnikolaus-wohlen.ch
www.d8d8app.com
devshare.farmyng.club
dekorando.it
kasset-revamp.uat.icweb.co.th
stnikolaus-wohlen.ch
solarwash.me
stnikolaus-wohlen.ch
www.akshaydeshpande.us
alanmortoni.com
stnikolaus-wohlen.ch
app.withuni.co
www.gracelandchiangmai99.com
z-dom-stnikolaus.davesblog.ch
www.freelance-boka.no
www.nonprofitsherpa.us

Certificate

The complete raw certificate details for stnikolaus-wohlen.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISA6059E+svmR4PQ49SP/ahVhnMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjMwMDI4NTJaFw0y
MDA1MjMwMDI4NTJaMB8xHTAbBgNVBAMTFHN0bmlrb2xhdXMtd29obGVuLmNoMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoFdxyLLOu7ylmtHMLpzntql
NkV0zRO6ONDLOQ/TiCVp3nhX4mfdZpkfVbEe6wriRBP8hzt/AnHDcmGUzrA36iW4
Uwr84OHuOudJx9BV7V5UQmv5czgK2/sDnRGlsMm6vsXt3bELskFn9T5xqwHWRTFB
OuPBPAuWkY7v3yRgfzP0rz/bUJQo82cAcAAY93HmM84BwMufN9DRD9i3gF7+L+Im
0fwFwCCHWx4iEUceq29Xu/lFFqcMEJwhqayXx1MnU8pkpA1I/E1SsVTp/Kd57mGM
SopPKnHc/w/9m+UqpdrQLVQLrOge+DfeOEckyOixFr5o6/kUYF5vCPASPilbTwID
AQABo4IChDCCAoAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSMnWddmmYA6vfM9qd8
BFKRZkEJ2zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF
BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j
cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j
cnlwdC5vcmcvMDkGA1UdEQQyMDCCFHN0bmlrb2xhdXMtd29obGVuLmNoghh3d3cu
c3RuaWtvbGF1cy13b2hsZW4uY2gwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDwlaRZ8gDRgkAQLS+TiI6tS/4d
R+OZ4dA0prCoqo6ycwAAAXBvqVPDAAAEAwBIMEYCIQDbg74FCWWYX4Dr5GouZOkI
d3Pf+6yVQRpXVL8vsGXkrgIhAOm9LM5QUEmfECCEwXHFX6ECGtZPHQBrbpXoI6PC
g2yTAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFwb6lT6QAA
BAMARzBFAiEA/dOWwgKuUF4dvpAjJtYsoDS/QL1wd21N+D0J2Yj9fLwCIHYgmzLp
c5SxQ5GKHCQTClJX4yVHzLCe68ZS3u+a2XVUMA0GCSqGSIb3DQEBCwUAA4IBAQBg
2kezbcAOSV0ERp8iUeU7IdD07taKbB0wSdDf4hPC6HBLzPTIqrlTNhh/HAapUxpY
ObMxAO+32vAtIMHa8wcUH0qzgj2IV/RRwPZNCrdPh3uROLmC+glHoFoKZ4etzlu2
kB386rMeWPVaVmkHqbKR0S0H7tkAGMw+EXUyk2MTpMQHvgyQPJSJzPisii0wiy7v
9DEuQvbbPjNaen0LU1rDMJpiIv8zVY7L3tEXFeL3U4gAOE2QlEW+ZRtUq3ZaYQ3k
mQmt/uPUEUIz/Rz1bJ1ZUF88r3lutuADFdGvO0v8hYhkdtKZALcS9gogXWJg+uvm
2czEZjOWzw2qZ1fV1Mhv
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoFdxyLLOu7ylmtHMLpz
ntqlNkV0zRO6ONDLOQ/TiCVp3nhX4mfdZpkfVbEe6wriRBP8hzt/AnHDcmGUzrA3
6iW4Uwr84OHuOudJx9BV7V5UQmv5czgK2/sDnRGlsMm6vsXt3bELskFn9T5xqwHW
RTFBOuPBPAuWkY7v3yRgfzP0rz/bUJQo82cAcAAY93HmM84BwMufN9DRD9i3gF7+
L+Im0fwFwCCHWx4iEUceq29Xu/lFFqcMEJwhqayXx1MnU8pkpA1I/E1SsVTp/Kd5
7mGMSopPKnHc/w/9m+UqpdrQLVQLrOge+DfeOEckyOixFr5o6/kUYF5vCPASPilb
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320282741804792843074926086010139325061223
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 00:28:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 00:28:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stnikolaus-wohlen.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24554024073314356595283885387758393355920625492949106415938507958148721409143218425213429857388729993867891628071028138153748275141167512010847949216547646929468970768550063636658107602767057238177009307178835726137162033354594737744741753635712216061895747349146480461355351964375561935260023080037644911601078872107524625735725524975387133962514257350089218019697941534628091409572964739518050813919618333215934343501306644082565589244560570765482814481010614801621969011136783277700747785816091109927095420908486895393564174891361319357056900534802021357089104609685434933312201412109879093845259465958007157381967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c9d675d9a6600eaf7ccf6a77c045291664109db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stnikolaus-wohlen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stnikolaus-wohlen.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001706fa953c30000040300483046022100db83be050965985f80ebe46a2e64e9087773dffbac95411a5754bf2fb065e4ae022100e9bd2cce5050499f102084c171c55fa1021ad64f1d006b6e95e823a3c2836c9300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001706fa953e90000040300473045022100fdd396c202ae505e1dbe902326d62ca034bf40bd70776d4df83d09d988fd7cbc022076209b32e97394b143918a1c24130a5257e32547ccb09eebc652deef9ad97554
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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