www.licht-light-ana.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:dd:f2:96:b0:5a:8c:2e:f5:ad:d7:5d:7e:8b:fb:26:b1:1f was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.licht-light-ana.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:dd:f2:96:b0:5a:8c:2e:f5:ad:d7:5d:7e:8b:fb:26:b1:1fSerial Number (int): 336861716481194879771791556940600172785951
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bb:e0:e0:fc:4a:ed:f2:77:4f:c1:30:48:26:f2:94:d1:e3:d4:1c:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 91:35:f6:79:82:1d:6e:92:24:1f:07:4f:16:13:e4:7f:f8:ae:40:84
Fingerprint (sha256): 9d:6b:8b:8d:a6:1a:86:4f:be:c9:48:e5:7b:18:4f:52:e1:80:b8:cd:15:a4:9f:06:22:e0:32:5f:66:1a:62:e6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.licht-light-ana.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.licht-light-ana.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.licht-light-ana.ch
Other certificates including the domain name licht-light-ana.ch
(limited to 100 certificates)
www.licht-light-ana.ch
licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
licht-light-ana.ch
www.licht-light-ana.ch
licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
licht-light-ana.ch
www.licht-light-ana.ch
licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
www.licht-light-ana.ch
Certificate
The complete raw certificate details for www.licht-light-ana.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgISA93ylrBajC71rdddfov7JrEfMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMzAxNTAwMDVaFw0x OTA2MjgxNTAwMDVaMCExHzAdBgNVBAMTFnd3dy5saWNodC1saWdodC1hbmEuY2gw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RZV1NRiF2s7c9vtLTCgW nJj0maB+q1+STWICY7IEMmzm6kJLS7eSt2EOAusnIucAkxS89RficDIA2rtMclmG rToQAg90xztBxt0q5ue2XsJx8e5Q8cVQNIsWBwGL5aHjstO0/mLupTbm/rKuMzZ4 IsgIxEmcgHGB8Zg/XHSFjt1ojOG/sebrGCwTD70s5tOrJ4aUbR9X3M+8yoCJ+y7I +JXUBsjDT+3DHWIDj2mkLnXPghHLnI1e5ZNIrEBg83b0MVNQ4vApZYKWvl9KzoaC tNEO739zRbE6Tjk4rrC6aTOE/4hXcmiTXyHHykcbaS5MYqIZf3bf/9rlI0Ia47G7 AgMBAAGjggJsMIICaDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLvg4PxK7fJ3T8Ew SCbylNHj1BzvMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wIQYDVR0RBBowGIIWd3d3LmxpY2h0LWxpZ2h0LWFuYS5jaDBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYE gfMA8QB3AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABac9UXAwA AAQDAEgwRgIhAO/d+ZUWM3SNGXG5T9mCioVUEUNrWXwx5joqt5mkK7QoAiEArA7g bJus3biQK5bHS55GsixWFGZbjCZbzJeBvgfLbpoAdgBj8tvN6DvMLM8LcoQnV2sz pI1hd4+9daY4scdoVEvYjQAAAWnPVFodAAAEAwBHMEUCIQCgwcj6HXlKmD3iMIfd rf55J1K2Fg6VH0zQK6vF13rt4gIgN9BSog8qbi0gysHet95YhNN1aWhZvf15ms/V DNj3sskwDQYJKoZIhvcNAQELBQADggEBAAhfTPf0Fpll+CQWli/G/g077KUHVCw0 7+tIkzI8pUzmTMTxfy4WVOe+khKE9cEdQ6Zpg9BDH+YLM8gUOZ60eaGG8PiuT6FT BWbrjpG5p2B5BWxisqkFyKHbzSH6s3dwUoRmqLBwqdSXuBSFkhmnyWRyLbL/00zb sdHGMbYsFMzr6naLUaRcMYStQJnm/q5QEoB3z54nK0nhQp5ozTa7t4HglvgxUTv9 BdbCdLqRt8C/VpaKUURCwkMYO24HMYfQfwXxvFxXG1lQQprtOtp38zjDiLpy8WKS uhVSatz1Ko0Ivh+nhMMiYWOvPBpzJLwCQSlGMVChi7V2R2Zit3SDUds= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0WVdTUYhdrO3Pb7S0wo FpyY9Jmgfqtfkk1iAmOyBDJs5upCS0u3krdhDgLrJyLnAJMUvPUX4nAyANq7THJZ hq06EAIPdMc7QcbdKubntl7CcfHuUPHFUDSLFgcBi+Wh47LTtP5i7qU25v6yrjM2 eCLICMRJnIBxgfGYP1x0hY7daIzhv7Hm6xgsEw+9LObTqyeGlG0fV9zPvMqAifsu yPiV1AbIw0/twx1iA49ppC51z4IRy5yNXuWTSKxAYPN29DFTUOLwKWWClr5fSs6G grTRDu9/c0WxOk45OK6wumkzhP+IV3Jok18hx8pHG2kuTGKiGX923//a5SNCGuOx uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 336861716481194879771791556940600172785951 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-30 15:00:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-28 15:00:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.licht-light-ana.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23640876089008891208403939979895460757026090710044938360084465048361959380218805096466455100188330062880559265003626022705107977723071042480563207733986061165682149685722197134081022502325285669098197815151504322590577557816884865898356401597138447838278460277157295937000876238161499971086440332642951532622386857843154913337952671982267882201853514403878636148848515997735370668627754066175635063811342093416769665223307713514500581188941358136887506879309687607390222471869270072991412905930467818630145432814624925814308872151736287108354563969454111081896489172484225459930987880034510607914782625936647416689083 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bbe0e0fc4aedf2774fc1304826f294d1e3d41cef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.licht-light-ana.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169cf545c0c0000040300483046022100efddf9951633748d1971b94fd9828a855411436b597c31e63a2ab799a42bb428022100ac0ee06c9bacddb8902b96c74b9e46b22c5614665b8c265bcc9781be07cb6e9a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169cf545a1d0000040300473045022100a0c1c8fa1d794a983de23087ddadfe792752b6160e951f4cd02babc5d77aede2022037d052a20f2a6e2d20cac1deb7de5884d375696859bdfd799acfd50cd8f7b2c9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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