www.honegger.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:e7:c9:bb:70:f0:75:9b:ec:f8:40:e0:b7:32:3c:a3:a4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.honegger.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:e7:c9:bb:70:f0:75:9b:ec:f8:40:e0:b7:32:3c:a3:a4
Serial Number (int): 315409570889242466901555118350212402029476
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b9:ef:9f:b9:d7:a3:30:ce:ec:97:8d:79:2e:6e:e5:06:74:33:d4:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:8f:7f:4e:98:ae:5f:51:e7:d1:7c:4e:84:14:d5:7e:0d:7d:91:51
Fingerprint (sha256): 95:e0:bc:1e:d6:c6:90:e4:b5:2c:00:1b:1a:e5:b8:ea:70:9a:84:a4:2e:3e:74:5f:45:53:17:3b:25:12:69:3d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.honegger.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.honegger.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.honegger.ch

Other certificates including the domain name honegger.ch

(limited to 100 certificates)
honegger.ch
itstatus.honegger.ch
www.honegger.ch
owa.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
www.honegger.ch
honegger.ch
honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
itstatus.honegger.ch
citrix.honegger.ch
www.honegger.ch
*.honegger.ch
itstatus.honegger.ch
honegger.ch
owa.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
*.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
honegger.ch
www.honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
owa.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
*.honegger.ch
itstatus.honegger.ch
go.honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch

Certificate

The complete raw certificate details for www.honegger.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5+J9qRe7v1VhDvh+4uj1
rTclZnfNFs+yQnA5urHd+cEyUlB6Tf4H2xzu/g8nApZFi8jrQrhNqAKilvj0idIh
sKg8u29ti6+/sXCVgzvPi5Tacau062UPuqW8ARvuOGuO+uH6lpS2yeqTdPyPcaUT
cGig7pNDkOw6BsqUPbwiDS3UkpZnzoznomSZ48MDOCWq//ua/ZyZRgLpxiCHSl34
Fw5gpj3KXaCDJQguC6OT5Xye+fcisWBdCYa4BUzRZwt3InPxVqE85m86j0KiVo+t
eoPeEdmUdbW8QBc1A4l6MvCa/b0MIHpUTjqbPpznpbj57Gf2cQkBMMTVjbvUNUdw
uVgpuADHmhQ/Ijv/n+OhfIktqM1+aHEoZik7kghub+/IsSSOz2c8Rhb8Ejsq/X94
mleOrWWoIxB/NOAXSvJcpurI+pCBgc/PR87hsuLwyoJpuL76Nz4S/Fctg5cQCqk+
E2vY2GFO8M35aRsOnssf8ib3MaGw3ICAqjdIRkT+pqQcpSLioCDsOM3YhXaw0sPD
0CqNxL88jx1vdPF3R2eR4Vk280YNB2vdJVR9dZv99xJCiBX/Sq6vHNGPLteFtEVk
LJgosXxldwobjLeEJpMgAzJNZZZg4dadE3CsTYX6SEDxQTpnQMg3OYz98I8Yy+Ez
TCJNnPGAaz1vNyKj3oa5RI0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315409570889242466901555118350212402029476
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 20:54:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 20:54:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.honegger.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 946007162912536689473193040517013477454556665912356331287893939631230938778120401397270151800813179760543873736100646073253872283148463346791575946895063858331512595714422805408348123946092543391653238413688010501819064871422052531820284657078493467377902788267366774362235292744200128333697530200618542520732275000897329523521186756948578446903817501443030696843376617090920983006807139726130411434946024830124644444720902680257787133264867879041516626665494119068630209302313769982937598421746675061483398358994309661479823643685350662072930021534034126454845941990093034810773855374113490258796634242861794139260057873453676786047051683971591811083011665145901041757011300277046881579157747279359269963629099324682530869721465212674062989439608945244263847604822844258523083241115260026230361902051375621284471345031765911125111123565720436024491979679075483300499211639226148869022704241206836206699526815129493671926095324668859920362559812986794054470773199582266167001988825607918311535709009762086988240852027781938852943320825724369990490613210996061670197597530447157120243789993522805246282816256298245905732710636615579146818434974446067018062107559561692874716730572592244836377642903604333298240581657832164625707779213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9ef9fb9d7a330ceec978d792e6ee5067433d42f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honegger.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ef6f50d6c000004030046304402201a18a4727c7e67089027d4ff280573613b607d11e1667510b383ed93065c0ae102200d60c156786a37647843239f2a5884709eb3caef93c8f8f7c32df600b20af6e8007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef6f50d550000040300483046022100f16cc2b8242606d6ee4cf178910517cbbfa8988a2d94e997f78f305b13153a85022100940398d0fb2d6a8589587304ed0e3ff27fc78b3b1a694ef3a7f55c1df5601e7a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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