cannabis-cbd.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:53:1d:e3:ca:8c:f0:ed:af:ee:bd:2d:9c:19:25:24:ce:6c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cannabis-cbd.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:1d:e3:ca:8c:f0:ed:af:ee:bd:2d:9c:19:25:24:ce:6c
Serial Number (int): 289620024621196528811746573450908593868396
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:77:e4:40:ba:55:b0:24:1a:c2:4f:ca:9f:49:5f:15:8c:15:e9:74
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bc:53:92:cb:3a:64:d0:da:ad:92:7d:e8:05:5a:69:bc:a0:63:26:57
Fingerprint (sha256): 9b:6e:a3:91:55:65:34:6e:32:d8:1f:96:cb:d2:01:a4:56:5c:1b:65:7a:9e:cf:e1:11:8c:73:93:58:de:24:47

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cannabis-cbd.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cannabis-cbd.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cannabis-cbd.ch
www.cannabis-cbd.ch

Other certificates including the domain name cannabis-cbd.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for cannabis-cbd.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289620024621196528811746573450908593868396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 09:39:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 09:39:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cannabis-cbd.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 677045023255690096414095042194312140371423792898706970106592113606289242307631352264747689820899618463468285938301038356203883654725140387984536485377172601328357023264079863181251738580879710647124628620496227841984263946470351809482932474111997632088449461585466502994782603623360840696657172990038821500019928867670556435473842575926652257156767399141595722539752582547717598738511427122968832199199783108151428639229352808548696270106061771996805910110295392021280050366488664088964545039480437238025761256558299729396153603384109333004268275971101087596303931116162902557889133115561706643566006847573486570683546143834760080280454401820994962542348202861024540298491439514405604702744280593054254531856943202729375325919473415620756232219359875757633264216974552585238963403814745654670028349846225350345300920262500878359666967009415296446474168395615844152729880884528443107520334184316261361018689903620433598062240897958595038227653371699007302201862482522610150245624238474230676538886533117117169916783765905331256483665393922137911793750115212255657350012144171067977483404300890640600922725117193693586029814937361170166924317004160742900607996584231473296788177930999711627900553607137787864411673017264971269545370439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b777e440ba55b0241ac24fca9f495f158c15e974
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabis-cbd.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannabis-cbd.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185aab6a5ad0000040300473045022100e2694d69fae830492354c1152c5013ff21b91e902916e91430bdd1c256a1d71402200448fd62378bc6414ed442e266fbe5afbb2268cd66f4dcde027304b0d5e7cd43007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000185aab6a7830000040300473045022100e01f41723c95c6f5f4b9ee69db318860113b3145efb92ee861df9dbb8a18941c02205b03e86adcdd0bfb94d75b3f9a0b40c768aec98d45eb6f76fec675888842394f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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