ashfordformula.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:10:80:ea:8c:f6:0a:cc:d7:26:bf:ba:5b:2a:c8:11:8d:16 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ashfordformula.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:10:80:ea:8c:f6:0a:cc:d7:26:bf:ba:5b:2a:c8:11:8d:16
Serial Number (int): 354065020637732183360038241951382640889110
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 01:83:33:41:e3:1b:56:e6:0b:fe:89:f7:48:f7:83:b5:ae:8b:2a:63
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:16:ee:94:5e:52:41:c1:f3:0f:51:d5:1e:78:93:a0:37:e3:9a:c2
Fingerprint (sha256): 95:e4:10:3a:88:55:40:2c:ee:f1:03:e4:b2:90:2d:70:b7:90:78:1d:43:53:25:0c:55:96:e3:c5:9e:61:c7:f6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ashfordformula.ch

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ashfordformula.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ashford-formula.ch
ashfordformula.ch
ashfordformula.webpresso.dev
www.ashford-formula.ch
www.ashfordformula.ch

Other certificates including the domain name ashfordformula.ch

(limited to 100 certificates)
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch
ashfordformula.ch

Certificate

The complete raw certificate details for ashfordformula.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4VEmm/w6eRQZvsTQwT1
s6iTVgzpmuu8tFk2Cny7IyVda7iyUlEm2HEttH5aq4HUwdO2yMLqIcwvfLlc+fG7
GRBxS47bb6/nJUpO2/J8SBL2r89009X9Ropi8w7mBOKXLJzgbHJ9cSTYYm2Y7XIi
Aibga7E8YckNEqkNXjIa2+nxssbE7jNuJeSIXhvQJf8+Ujww/ScJtm3x8rcurP3y
P+TmT6zqqdSy6lrvI+4U0xJInDS3W6IFDzA5Uq9HcNq1X+th4TPsEmUqtx9/Pqqi
C9z2Uf6hTF2QGXXjdPEbfNtMSkyu2MF2EVGJYMR1RzAqYyuio3S09rbstrI2ks7s
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354065020637732183360038241951382640889110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 18:46:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 18:46:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ashfordformula.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24682186359373834939900707335958888206015264979020160652602901697124252495928688600876742431253361266689074990038158338921728027624505051512900674370233465935293394044040838656080926494436776187667673997756649172958294905763423353292881151366125764040361774058396663709838402071419581328081411328871017984198573320440084656499217363065314194178945535093276035739890449020631201790876851248713496180307039474461420673235101411735406380548661075003513521416277255218583449857360764738888561009967478118480154591220260542651840170629108296788894451605765644383626296188736216768211677209288910553629006359726674576075969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01833341e31b56e60bfe89f748f783b5ae8b2a63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashford-formula.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashfordformula.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashfordformula.webpresso.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashford-formula.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashfordformula.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a47fb96810000040300483046022100ce77a464f550e601985c3e23887c0afb6abe9bb3e1f50e371ad7b9178e3da2a902210099af59090ee174fca7e0a35b7455b869d9ae892eb61e5f6b4c9a907a70bc8bf0007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a47fb9680000004030047304502205b6d82ee6287aab764f313fb037b6e57e60ecfacfe287115d7f9d2cadaf0bc7f022100df195f1da7074a76f68d229f893004e41ad6bdd54841634d51e28302d582a52b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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