l4m.maenjuel.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2d:fe:61:66:ea:22:be:3d:4c:9c:44:e8:21:34:b4:56:e2 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=l4m.maenjuel.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2d:fe:61:66:ea:22:be:3d:4c:9c:44:e8:21:34:b4:56:e2
Serial Number (int): 364099979889563786028870448932252045039330
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 00:f7:b8:6b:00:4f:51:ae:d7:bd:2b:98:f7:49:76:f4:01:12:5e:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6b:fe:06:1e:11:99:76:a7:14:a4:67:52:2e:3b:83:a2:cf:bb:8e:4f
Fingerprint (sha256): 95:3f:96:39:78:a6:0c:6c:ce:4f:88:07:4b:ce:de:bc:02:af:52:63:64:1c:fb:ba:9b:ab:d1:72:c7:c9:52:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate l4m.maenjuel.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for l4m.maenjuel.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

l4m.maenjuel.ch
www.l4m.maenjuel.ch

Other certificates including the domain name maenjuel.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for l4m.maenjuel.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364099979889563786028870448932252045039330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-20 04:45:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-18 04:45:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'l4m.maenjuel.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 930040520889008227323905229468588142152957987768463417771560162473663253373010791213002449767876754817707665261529330580127404578887217146246233065136154120588976072634423904021802543547689913833610516616015350103673162221905141543794290718411442615952223150488597982691964454382705690274343179229342433925935477565528878863779367364777789457044170564084053733517185885123027064143580312494430504285593764487013052614269362784986761222630716933249804893872070357412438242917251595839781693503761941031701182193493587852785344582376116391127950799756315490856705593024427784911187227087355964592002504699399963045127887841027488638710007422686790884761809875043925329798110157196504093548784033329968022450060084181737384551933406995936623350577040354235326127613733490220738472115985469878227247898168281155641598271024806733314535868818271294218006154732349701791505731356083246513851049166488478993634735348500052698213297355522205833436244214169146246592487771084553314326566748917444195253016658732563599068297610215929681043211165644704028173985777573841189631759801482361103556656119782165059484443212452506166302140747525751463781178755839449671444760600087444217533837278039367986076337423163419596438163010723301511384842241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00f7b86b004f51aed7bd2b98f74976f401125ea8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l4m.maenjuel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.l4m.maenjuel.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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