about.privatschuleolten.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:a1:b2:0d:dc:11:94:52:80:f0:4e:2c:94:31:85:e0:92:59 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=about.privatschuleolten.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a1:b2:0d:dc:11:94:52:80:f0:4e:2c:94:31:85:e0:92:59
Serial Number (int): 403471279347943850270611474262255869137497
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 57:8f:5d:50:f8:8f:e6:1b:f4:e0:2d:d9:b6:61:ab:1b:a5:72:7b:78
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:d6:8c:0b:ea:48:6b:1f:d0:e3:b0:8c:b8:63:30:cb:1a:fa:00:6a
Fingerprint (sha256): 9e:d8:2b:30:80:8a:c5:13:ba:12:1e:8e:3a:d0:2e:e7:7a:5d:03:d8:ed:2b:26:aa:c6:03:ff:4c:c9:3c:1a:c5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate about.privatschuleolten.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for about.privatschuleolten.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

about.privatschuleolten.ch
www.about.privatschuleolten.ch

Other certificates including the domain name privatschuleolten.ch

(limited to 100 certificates)
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
addon-obiwanch.privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
addon-obiwanch.privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
addon-obiwanch.privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
about.privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch
addon-obiwanch.privatschuleolten.ch
privatschuleolten.ch
privatschuleolten.ch

Certificate

The complete raw certificate details for about.privatschuleolten.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw74xrt32AaVPW3fJ3oZ
dTzhRhiKwIyxcrjxUmEU3xZxcm/7P8EaYSEEIDP1LprwGVamKaC911qW5MvltZK1
fnB8R1YIvUMnH5QyX0Gy0LFXAkPJdGUT7HQzrLTF1rXPXpwOwbfLdE5Y8IqRbtsp
7Hl03RLYqh79cxF/y9mXoEiMp/gXzN4qP5SwEOKsd9LCOsof6x5p+QA0p3n4paeM
S4OA9w21LfR05Nt/YL30qvktwLXmVWa3Z/i2ws8JPzQB3S1mqDuRPY3VPSOpxq/c
jHiUQ7SsdaSHQFt6bv74iN2OZQTIVgWND5FPlZC3yRSBM8GP2h+7uK7vo4TRTT9X
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403471279347943850270611474262255869137497
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 23:53:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 23:53:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'about.privatschuleolten.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23613945889724407850037724321807535950743736567770171824806180230041319287761252798630768468325766614990707358157119813982155095181521848643124427344640135102106642807102716505762515476423238022009615019221802321606514002871807498893974107055179781991160397445570883473117531063462451156234945291496832420199786749804481059640586694798282320588624820888264529961776770309724678092375820931510595368333733367387718909174963417463528156040571823930516580670532415525554681591223465984811182058422929908486821714866932217075449371383697822458574339255993399895369720839279380977544462022007400894013452497155636984764401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							578f5d50f88fe61bf4e02dd9b661ab1ba5727b78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'about.privatschuleolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.about.privatschuleolten.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d38f4e6fb0000040300483046022100a783d67dc174af854f5c74fc9d5f51620ffbde1a1d79197860b4eb2d1564bdb3022100f20eba052ce34e32c32a18743a8e8c1e1e4202ef2a0d795d458d9bae23dc12d4007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d38f4e7460000040300473045022100eda40c041f60aa68cb94b9d365383d11e102e620e3b22361e33fc6ccb0f09234022067c4ce05e3e869db56e1c1ce4f2572f2b1e013de7a90183a69eb7a2a96e26d95
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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