markusko.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:3d:87:5c:19:51:63:dd:c3:f2:55:cf:50:58:b6:8f:7c:2b was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=markusko.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3d:87:5c:19:51:63:dd:c3:f2:55:cf:50:58:b6:8f:7c:2b
Serial Number (int): 369386292093468810073602667235452231056427
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 26:9d:fb:1e:54:5c:2d:b5:77:17:58:5b:59:4c:4f:41:0a:6a:ee:ff
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:61:27:cb:a6:9c:27:b3:09:9c:4a:56:1a:30:16:d9:84:68:f6:8d
Fingerprint (sha256): 9c:77:14:e9:88:c7:a1:ea:ff:bf:4b:cf:2b:6c:11:99:f9:d9:6a:6b:cf:0b:70:29:aa:d0:77:91:a8:4b:b2:0b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate markusko.ch

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for markusko.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gallry.markusko.ch
koch.has.enough.coffee
markusko.ch
pastr.markusko.ch
sesame.markusko.ch
www.markusko.ch

Other certificates including the domain name markusko.ch

(limited to 100 certificates)
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
stats.moin-alex.de
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
docker.markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
docker.markusko.ch

Certificate

The complete raw certificate details for markusko.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369386292093468810073602667235452231056427
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-18 06:29:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-16 06:29:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'markusko.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824540263765665816498801564218341055096685356887032856736322027350698729113764598815376886410822374369950160759433456951413113701780521838353960897540627283996273363726552575825531163835027192372900600069379845975743196134271138946375815211744584279033063120717309086526186243030858285942517691088359588418457172405601119438827811142765623571680917366052470977087503151082819743494633901938624487933314722023801596523118400468983456206748162096686751432041826516120306654674029019099786393996499004605224549873427890909854624755450861040554928032612944691462244676937293039970058899557416684824679517910438297626812444355555654536904925087311036807812640623570996915743311452431213000679644363847237025033566675749450314234728145410854355557311195493708443066944339534421601522632176031417527292299102578427980425172601931523227338404592624388507986895126598630589501291127998188382468641517354347738499780602418514694381906968145114191136531471824713548441601748488181441142476023804726648306313758268198980193287710393545482434340893008222688611213361922042686118948399015225082622168851243930894901286077421648069359002740767615403485991430089050717183198390052372057004819340641465478695930036221158562362746148402781903920328121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							269dfb1e545c2db57717585b594c4f410a6aeeff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallry.markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koch.has.enough.coffee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastr.markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesame.markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markusko.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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