brezelkoenig.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:25:8c:0c:a9:49:fd:7c:dd:74:5a:a9:42:19:f5:4e:88:0c was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=brezelkoenig.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:8c:0c:a9:49:fd:7c:dd:74:5a:a9:42:19:f5:4e:88:0c
Serial Number (int): 274113463031916983268904012996943452997644
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 18:26:cb:ec:32:92:48:3c:bb:f7:d8:0d:5d:3c:10:51:dc:fb:3c:ed
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:05:4a:fa:fa:a6:1d:16:0c:8c:51:74:63:13:dd:82:1e:20:a3:ef
Fingerprint (sha256): a1:07:82:e2:79:8c:21:0b:b5:53:c4:9a:9f:f8:c5:f5:6f:73:f8:a8:6d:18:e6:af:c4:d5:de:61:87:1e:cf:80

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brezelkoenig.ch

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brezelkoenig.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bretzel.ch
bretzelkoenig.ch
bretzelkoenig.de
brezelkoenig.ch
pretzelking.us
swissbretzel.ch
swissbrezel.ch
swisspretzel.ch
swissprezel.ch
www.bretzel.ch
www.bretzelkoenig.ch
www.bretzelkoenig.de
www.brezelkoenig.ch
www.pretzelking.us
www.swissbretzel.ch
www.swissbrezel.ch
www.swisspretzel.ch
www.swissprezel.ch
www.xn--bretzelknig-yfb.ch
www.xn--brezelknig-kcb.com
xn--bretzelknig-yfb.ch
xn--brezelknig-kcb.com

Other certificates including the domain name brezelkoenig.ch

(limited to 100 certificates)
brezelkoenig.ch
ditsch.de
webmail.brezelkoenig.ch
brezelkoenig.ch
tezaaa.com
ditsch.de
brezelkoenig.ch
the22murdersofmadisonmay.com
app-staging.getayra.com
brezelkoenig.ch
github-topstars.cawpea.me
octosdigital.com
webmail.brezelkoenig.ch
ditsch.de
sriharsha.dev
ghneurosurgicalalliance.org
www.marcosdourado.com
login.staging.brezelkoenig.ch
aarnavjindal.com
gokulamdroptaxi.com
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
www.softwarelc.com
brezelkoenig.ch
brezelkoenig.ch
ditsch.de
remote.brezelkoenig.ch
brezelkoenig.ch
www.scandiac.us
login-test.new.de
www.mairimed.com
auth.gluegroups.com
webmail.brezelkoenig.ch
tumascota2022.com
brezelkoenig.ch
ditsch.de
brezelkoenig.ch
brezelkoenig.ch
tezaaa.com
www.zmy.pw
algoritmo9.site
ghneurosurgicalalliance.org
login.staging.brezelkoenig.ch
oivis.com
brezelkoenig.ch
ditsch.de
app.brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
*.brezelkoenig.ch
web.feedad.com
ditsch.de
www.allinonefitness.ch
bingo.remotesocial.app
design.joybird.com
brezelkoenig.ch
app.caddygo.ru
brezelkoenig.ch
webmail.brezelkoenig.ch
www.raugh.club
brezelkoenig.ch
ditsch.de
blog.pirika.org
brezelkoenig.ch
brezelkoenig.ch
letspark.gr
brezelkoenig.ch
brezelkoenig.ch
webmail.brezelkoenig.ch
0xgn.com
*.brezelkoenig.ch
gamescoin.pacta-cloud.app
brezelkoenig.ch
firatkirmizi.com
brezelkoenig.ch
cv.hofs.dev
ditsch.de
webmail.brezelkoenig.ch
ditsch.de
ditsch.de
dev.developer.viviware.com
ditsch.de
ditsch.de
staging-admin.lvmhcomplianceescape.com
brezelkoenig.ch
ditsch.de
remote.brezelkoenig.ch

Certificate

The complete raw certificate details for brezelkoenig.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TwPCqBNC+8v8rJFpFZS
JuQLJOaeD0Dl0xNBHgjUxhUGrUNeXFUMNBZMSkyeicaImBioc7Fq4DPiIxA69YzK
vMk6Bc5JByrDQeRrCE5rs7dCRdNte57qsSblFRXxmtom57UtwEve1fRM0X0CVnwe
NW3toV2m0H3JUSHEW3smn0QTjN2UXIFPHLqSjI8HYlM1l2OUOkEPsx9zgeS79Vyo
E7yp1A1kIiHBb+ZgfSy6zDesJP3WkOf/xqpCJkADkQNCfOa6VH0/KyBYmkQd1RC0
psS47lPhXRv4D0M2YhmHgy5hATZNe6YPU+Jr2Heus5LnnRieXTQ3g4xRpl1JTX/K
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274113463031916983268904012996943452997644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 09:42:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 09:42:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brezelkoenig.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28938187913564333290681674055089210114240613539167139055243139944464760065953514168009806704083511251280458918751229220020865176394027931536703363043351403427615377254205715451240091479507903194386967898822648291368363377954949378172422811413252768559179140703041711658355141962703753895189968362928726054330950794967248260860752531706830490569594981241653547889284681139079642944872743289414818958646576268219194849814851645862409146919622148653008302722572732458177925071175009498007879627634194396675150513066014001376399087370396090969753574754303788272722935174475037655863007054179346471120360003837888401754867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1826cbec3292483cbbf7d80d5d3c1051dcfb3ced
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (438 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzelkoenig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pretzelking.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissbretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissbrezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisspretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissprezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzelkoenig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pretzelking.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissbretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissbrezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swisspretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissprezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bretzelknig-yfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelknig-kcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bretzelknig-yfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelknig-kcb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aeffb1d7600000403004730450221008c072a5f53498135994cb7cab0f7c9a29038395506b61fb3552bb3272f0371bd022013821f316840b509abed87839ff49ad4dd412bf3ddeba7bcbc81ffad3765232e0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aeffb1dae0000040300483046022100dc0acde2719d33f12bd19f4e37cf03d629abfb720d17d72451382516144c2a33022100e2461c21ca1f645008226bbe19d624d8da9ff84fc785cfe64127ca53d1722089
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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