itsupport-luzern.ch

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:3d:75:35:d3:97:38:f6:89:4b:4f:3f:7c:97:6a:0d:57:65 was issued on by Let's Encrypt .

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

itsupport-luzern.ch

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:3d:75:35:d3:97:38:f6:89:4b:4f:3f:7c:97:6a:0d:57:65
Serial Number (int): 108025309472747338535695227428861396211557
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: b3:d0:8f:c2:2c:d2:11:65:c8:e5:61:ab:30:cb:0c:95:b7:46:59:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1f:7e:15:40:41:40:d3:69:5d:70:83:16:1d:7c:ed:72:67:2a:46:27
Fingerprint (sha256): 9b:eb:39:95:99:b4:74:2d:1e:dd:ef:fb:eb:ff:1d:d3:55:9f:c5:9c:61:85:89:30:82:03:c0:46:00:02:db:ab

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on itsupport-luzern.ch
3
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

itsupport-luzern.ch
webmail.itsupport-luzern.ch
www.itsupport-luzern.ch

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGQDCCBSigAwIBAgISAT11NdOXOPaJS08/fJdqDVdlMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMDQyMjA1MDBaFw0x NjAzMDMyMjA1MDBaMB4xHDAaBgNVBAMTE2l0c3VwcG9ydC1sdXplcm4uY2gwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/8qycJHRkdzVoFsjjWnqdfymq fGTAvDeCHIo7zSiVbY92CrMmJzklhAXxcSGatn1eZbQvDKsnKLunL3WHlGrTsl/w 3gPJm8vvTsFG19sYvm9oux7y85rGuYz7XrkUTUURvDidN1d0QudbJz6aYqiXgTwU RHA0I4J/p82d0x9LqIfTqVtgXoIYbXJK1vIWh8g8r82R+8EYB761rpGDJbtFZBkT 7b1RzTXIb/MDe/1q5/udVxAzPg2tvrh8HfX5SRMOTVoV8EloJmenD4tKn2hcRgr5 M1TD3wHMzpgEAcCcw8bdntYO1qN8OIPivLvafDb0FWrNDdjfdEy4jOLufUA5rNlb lq8uvIqDCfksyB9KIjtIHcQobKluSOv4bcuN36uKgsh5+D/oEKdnLcFmMNImnIKy 9Ku8LauhVPjg7/v3i0o4NWrj9uuwEVY1REzylXlhjPDBcitQu2FETMb32vRPxfKL nIihYBnK0hDhmsN0Qa6JxampvOuE/pm3O7mkZtBinwdAUUypsW5OPnmdt9TkBZhb YCpOFqdwl8l1afXIKnkCgVxlH4VLVxtmGJHxDKzok14DHb8uS9qO5xdqJknBhvD1 zJM53aZ8blrO2mHNvJ4n9E4nQcyqhiJcCVYuX0Lzgdxt2xNYqL6mzJNKQzwk/Gkl aYnaH24bTrPdAJxv3wIDAQABo4ICSjCCAkYwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBSz0I/CLNIRZcjlYaswywyVt0ZZxTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3Nw LmludC14MS5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy dC5pbnQteDEubGV0c2VuY3J5cHQub3JnLzBUBgNVHREETTBLghNpdHN1cHBvcnQt bHV6ZXJuLmNoght3ZWJtYWlsLml0c3VwcG9ydC1sdXplcm4uY2iCF3d3dy5pdHN1 cHBvcnQtbHV6ZXJuLmNoMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEE AYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBi ZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNj b3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0 cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQAD ggEBAGWPAJqf0lL55hDg+13AshfRf/tn4Zv32Ds9oQOM8XkImK7Qx02pIytNR83Q Xg3pFyay4PWLKaqKWJS9kLzSRM0MGQZ0f8d4wE6dR5euar9woc/MnoaTdEHGvNPd m+7gDC2NooHGej5jwKSbf5qvLvvh8s9qT48Y+xCD0utT+OvVM+XUgbF6GpwowPYg LKte1Qjxzwyk4eynFvezTBhK1gucYxzsoafXwwcwUtg/szVgFgalL1W87+tncOMS oYjAuZB0I3IQBhkiMFvdR+UmC8rQH+d5NFRv2zk5r3OitP8fWrMDDSLso0+d9vxa ASSHDaLZpjom6EYQBuV5q/TZFfU= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv/KsnCR0ZHc1aBbI41p6 nX8pqnxkwLw3ghyKO80olW2PdgqzJic5JYQF8XEhmrZ9XmW0LwyrJyi7py91h5Rq 07Jf8N4DyZvL707BRtfbGL5vaLse8vOaxrmM+165FE1FEbw4nTdXdELnWyc+mmKo l4E8FERwNCOCf6fNndMfS6iH06lbYF6CGG1yStbyFofIPK/NkfvBGAe+ta6RgyW7 RWQZE+29Uc01yG/zA3v9auf7nVcQMz4Nrb64fB31+UkTDk1aFfBJaCZnpw+LSp9o XEYK+TNUw98BzM6YBAHAnMPG3Z7WDtajfDiD4ry72nw29BVqzQ3Y33RMuIzi7n1A OazZW5avLryKgwn5LMgfSiI7SB3EKGypbkjr+G3Ljd+rioLIefg/6BCnZy3BZjDS JpyCsvSrvC2roVT44O/794tKODVq4/brsBFWNURM8pV5YYzwwXIrULthREzG99r0 T8Xyi5yIoWAZytIQ4ZrDdEGuicWpqbzrhP6Ztzu5pGbQYp8HQFFMqbFuTj55nbfU 5AWYW2AqThancJfJdWn1yCp5AoFcZR+FS1cbZhiR8Qys6JNeAx2/LkvajucXaiZJ wYbw9cyTOd2mfG5aztphzbyeJ/ROJ0HMqoYiXAlWLl9C84HcbdsTWKi+psyTSkM8 JPxpJWmJ2h9uG06z3QCcb98CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 108025309472747338535695227428861396211557 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-04 22:05:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-03 22:05:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itsupport-luzern.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783079300567041158415124868670248531181866986571571725808021661620059342668907871617261067450787141016502179974078016622992668310720496411773110398856958683238715385589345746832690566199900298253793119263074977109200412426920197467549423832058591334818656111167069885452648321551660292653847696279844959519982917630482409904330376768202446805114507596677004745415640103046789571839948377398771020619583696184386274037936362987437822318320164427684109069479366076797956209760018592215360649198195106596937941731479205538141632632434506954023646293031096603160845690451816565546313399168362454692864621072668709674101599131031520999922377670054544785693480934929784149306649650068084981075489847959196967745564476638953107515628709415935106372673837426977000435436444480514176878402184354029418750019277961787736501636115758170394859648864805516676161838967623777012576589463304853889954166486683217497127238463085033807759410556341028706196800568194578868800528439269740991387258896333545433082464150703865937029004343309444770430762390907964042774518605566282626512449220817455431401022707829299254137405081138280698154362706422834794889433370495485778989794818733370994988385761253150703572956485940156410796742790351055096211337183 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b3d08fc22cd21165c8e561ab30cb0c95b74659c5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsupport-luzern.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.itsupport-luzern.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itsupport-luzern.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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