vista.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:d5:47:40:51:bf:71:36:86:4f:15:41:d2:d5:d8:51:55:0a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=vista.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d5:47:40:51:bf:71:36:86:4f:15:41:d2:d5:d8:51:55:0a
Serial Number (int): 421023997033943349218508582872497530164490
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 13:48:5f:c5:cb:07:a9:38:8f:ad:e3:6a:53:ba:95:0e:b1:5b:88:46
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 38:f3:c4:18:23:99:75:31:0f:c1:8d:7e:54:96:18:38:a5:e1:69:9e
Fingerprint (sha256): 99:90:3a:ce:9d:98:ea:38:c5:e3:4a:eb:ee:4f:af:9b:46:d0:7b:8d:26:a6:06:68:0b:ce:95:67:d7:fd:43:4a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate vista.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vista.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vista.ch

Other certificates including the domain name vista.ch

(limited to 100 certificates)
*.vista.ch
servicedesk.weareavidity.com
servicedesk.vretigas.it
*.vista.ch
*.vista.ch
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
www.vista.ch
vista.ch
vista.ch
sdpcloud.netwarx.com
ictportal.linkfinancial.eu
elearning.vista.ch
helpdesk.bedes.org
servicedesk.bat-agrar.de
aiseait.fuchs.com
helpdesk.hambroperks.com
www.vista.ch
itservicedesk.eldoradogold.com
helpdesk.bedes.org
helpdesk.vista.ch
www.vista.ch
aiseait.fuchs.com
vista.ch
vista.ch
assist.pentest.partners
assist.pentest.partners
newsportal.vista.ch
*.vista.ch
*.vista.ch
www.vista.ch
helpdesk.actosoft.de
vista.ch
assist.pentest.partners
helpdesk.actosoft.de
vista.ch
*.vista.ch
servicedesk.bat-agrar.de
servicedesk.weareavidity.com
helpdesk.bedes.org
www.vista.ch
www.vista.ch
aiseait.fuchs.com
vista.ch
elearning.vista.ch
aiseait.fuchs.com
*.vista.ch
helpdesk.coulisse.com
helpdesk.nationalcaregroup.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
helpdesk.saviaantjes.be
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.vista.ch
helpdesk.nationalcaregroup.com
ictportal.linkfinancial.eu
sdp.vdp.com
servicedesk.weareavidity.com
helpdesk.hambroperks.com
helpdesk.nationalcaregroup.com
ictportal.linkfinancial.eu
vista.ch
assist.pentest.partners
assist.pentest.partners
ictportal.linkfinancial.eu
ithelpdesk.archlynk.com
helpdesk.saviaantjes.be
ithelpdesk.archlynk.com
servicedesk.weareavidity.com
ithelpdesk.archlynk.com
vista.ch
vista.ch
assist.pentest.partners
*.vista.ch
ithelpdesk.archlynk.com
*.vista.ch
assist.pentest.partners
sdp.vdp.com
servicedesk.bat-agrar.de
www.vista.ch
sdpcloud.netwarx.com
assist.pentest.partners
vista.ch
helpdesk.wentworthclub.com
vista.ch
vista.ch
assist.pentest.partners
helpdesk.wentworthclub.com
sdpcloud.netwarx.com
vista.ch
itservicedesk.eldoradogold.com
servicedesk.vretigas.it
www.vista.ch
servicedesk.vretigas.it
assist.pentest.partners
itservicedesk.eldoradogold.com
itservicedesk.hertspartnership-ala.gov.uk
helpdesk.saviaantjes.be
helpdesk.nationalcaregroup.com

Certificate

The complete raw certificate details for vista.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ3wi9BFdrdMZkB2cM4o
UfsJ4wRr5lBI7SzG2LTTzSvDZt7tRKDsBWWgj9mH2F80f/RPtKpUW8Hi5DXDVu2R
VFfoXejcHpHYTVLiRr8LAuoOVz3XbkG5PhesO24BljC34N1t0tx7GbogDlt88HtQ
Id44OqKx2yP/uV+b9MRWpHeIYfc4IWAr8I8jXTJOqOlwrgxc6W7lfDDmL0oNSrYf
Obt2Yw6e6HvCTYLr79SuacxHcVCDznc/el7DTFjtkFDnqljMQX6v2KxEuJKvC1mG
Ws8IXEzhZATgIeg0FEjjOJtghzSsRDLNTiu3yokADuXO4zwoE5HxA6SVdcfF+tkR
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421023997033943349218508582872497530164490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 12:28:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 12:28:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vista.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24315637489442479210436936029946059133499920767500912806470629627740556219591568161427112854993418048332382234180394706865826212183956479036835416946317092170648658125305011024921583680557987078518280846654477392998560793666289292080555604660120426844997161450751824073398651244919602164918425995485850764200657408772264683677271341743189087477347817032384516099075336296900844893179952511081107852280911122019951881067213490618506358183995526359926398346814065244607276103135834607807071644518149874552425092582056680887069395050439500030003577134788927279535948871513477870245715314814144246594667090725839377600813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13485fc5cb07a9388fade36a53ba950eb15b8846
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vista.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d5a8e85eb0000040300463044022021511034e0bd4bd208b8f931b403f1314f8be457f8e37ce3035c1f583f8bd7e602205a2f3ee75fc7fd024100f4d9a0c688160860f7f4ff615034423f985d9ff85bcd007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d5a8e85fe0000040300463044022031b2d63cea1eb9c894005deee2babed31605b1b15561559d2d676c592db0eddc02204ee2294ab953430d0bf127f5d5e33065d3753b7350a1a34b496683e3608b8adf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004cd2e8ecb37cd90b5d7581a51a8ed1880573f1533f9ec1024ab96cd35db89fbfc7fe3f8a2b5c996ba8c124236781764cbca8c324c248cd40281ffc3e17994ba83d33cb6ab138ea93a631ebc51fbe7a10e21b8876bd84e692c9522c2775066529462a9520966162de35ef6f039750bb0643a7b9159122f9ee30e7ea6dbc6cf9936999c233bbc369a556082c96d3c333deab6d97c5ac8272de205c133c6daad64bea4f3f1cba0e7eea773943202708085d18865edddd176ddc06c470a4bc2769cea8721639e39aba7b6d644bef569ed67a7e7209bfd4c2f988987b4863534c05141ace641e634c7f765e60c36479b6a4e82bc956207c4826f10848ef0271a29b7e