a2x.ch

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:64:6f:25:32:d9:5a:f6:86:1c:80:f1:79:13:c3:cb:09:fa was issued on by Let's Encrypt .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

a2x.ch

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:64:6f:25:32:d9:5a:f6:86:1c:80:f1:79:13:c3:cb:09:fa
Serial Number (int): 121288260077711127571613276047116956535290
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: 85:98:4b:81:48:77:b3:f0:02:2d:13:f7:cf:e8:ff:e7:9c:65:b0:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:93:0d:5e:99:d3:b0:da:95:df:dd:63:d9:dc:8b:cf:81:31:39:0d
Fingerprint (sha256): c1:05:48:57:5a:a5:22:bf:58:3b:b5:44:f6:1e:c9:e4:62:cb:42:61:94:e8:29:88:01:11:e3:dd:34:e9:06:63

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on a2x.ch
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

a2x.ch
www.a2x.ch

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgISAWRvJTLZWvaGHIDxeRPDywn6MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAxMTgxOTU2MDBaFw0x NjA0MTcxOTU2MDBaMBExDzANBgNVBAMTBmEyeC5jaDCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBAMxoiYWf7tI2/ODFjpxPFXmLyx6xWEmH9wGmW/hBZE/p rBBRp9mPvuN/gwj3Z9+skrpjenYBEfWSi4uiEU6/0fordy22nO4g+QsabFtoTMKm 66CNqZbWVjrYAxY8FmKGLJRl+ZgbHM9cHDvQsBRaH+c7/Ad+XcG/T5g+R4eoRWj5 UqP9VyLE4MfPY5vYJ7EHKRDZ3DhnQDNT02fj+m4hCOLamDRDS+AB/8DMgusSqkmB R8ij8gunDPWcAtvIYDKlhjTALk2si6fMuB3GdPN2dyUHYc6iYGsoDBkINLVIb7yg CHlIlNyHBHJhUX45X5HskKS1spAEuhAhEwNV/HCSeYBsv07tKvUpKC1fEaw+gkeB 3pksUOA2muKaDYcU0luowYYOCGeTNd6YBSUrSTpUnsoQJldRc3OQoJX8VbwRzMW5 /mpFXnbCQJ/CAoC91jswlAdwWl+xxmBoA6DdiQf7sU2cfKsK+d4P3c1C3Q9kIEW7 gttNo8DiNIktuHtuc7VVMnNYq6rR88DNy6yZv3pZHtacbNiQRoh2vG/vF1v8OqqF +cOOdkcXDPgNstli1dE5TWwtU9YIp+L+PrRWXKi91O0GFMNHBC79rpn/gWWbblFW gCQxAj/abZY8Besi8JXCC3qDHx+JuBXTdlRSmf8ScHYzkL7f/qDcU2bLdYQ99G9B AgMBAAGjggITMIICDzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIWYS4FId7PwAi0T 98/o/+ecZbBBMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAGCCsG AQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgxLmxldHNl bmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14MS5sZXRz ZW5jcnlwdC5vcmcvMB0GA1UdEQQWMBSCBmEyeC5jaIIKd3d3LmEyeC5jaDCB/gYD VR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyB m1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVs eWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2Vy dGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3Jn L3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQBoI4uyWqWYjNXv7Ei2XDTE JziUXAaLgKSJMqgc3SHfMrZZrUEMndPNHY3bUkzNd1lNY0xQoJvPwZcGzeYVT1Rw ommT6ytkylHbIAcLZb//ScQAhzI/tgBEV9bpE36w/I1E3po8TzmS1iE/wbEAWd3v vCDtcqKUjaa0YzKbPEXGwWvxz3dm8JD9AvveENOO757y/iyJNo1C88HYoVKNV5GD eE/4/bwAaP2AvvMxwKBWEGutoO5Nlx1Te/h+ivqyWAvOsd8rZSkXeFq/hoWQY04g 4FrHMmA/RNg4Vw4/lo7G4QTQEo5eqs94LeC/Q3XEzLvzqjvM4LtLfzu11perdmJx -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzGiJhZ/u0jb84MWOnE8V eYvLHrFYSYf3AaZb+EFkT+msEFGn2Y++43+DCPdn36ySumN6dgER9ZKLi6IRTr/R +it3Lbac7iD5CxpsW2hMwqbroI2pltZWOtgDFjwWYoYslGX5mBscz1wcO9CwFFof 5zv8B35dwb9PmD5Hh6hFaPlSo/1XIsTgx89jm9gnsQcpENncOGdAM1PTZ+P6biEI 4tqYNENL4AH/wMyC6xKqSYFHyKPyC6cM9ZwC28hgMqWGNMAuTayLp8y4HcZ083Z3 JQdhzqJgaygMGQg0tUhvvKAIeUiU3IcEcmFRfjlfkeyQpLWykAS6ECETA1X8cJJ5 gGy/Tu0q9SkoLV8RrD6CR4HemSxQ4Daa4poNhxTSW6jBhg4IZ5M13pgFJStJOlSe yhAmV1Fzc5CglfxVvBHMxbn+akVedsJAn8ICgL3WOzCUB3BaX7HGYGgDoN2JB/ux TZx8qwr53g/dzULdD2QgRbuC202jwOI0iS24e25ztVUyc1irqtHzwM3LrJm/elke 1pxs2JBGiHa8b+8XW/w6qoX5w452RxcM+A2y2WLV0TlNbC1T1gin4v4+tFZcqL3U 7QYUw0cELv2umf+BZZtuUVaAJDECP9ptljwF6yLwlcILeoMfH4m4FdN2VFKZ/xJw djOQvt/+oNxTZst1hD30b0ECAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 121288260077711127571613276047116956535290 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-18 19:56:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-17 19:56:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a2x.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833913306080371651600109572251838360116047182029304434773630120624043092789608393781786254332215272061247065873073187127279995941209963519413200648646972635519811728140713612508166145459387963444898257636316820504750251928635486654573007261308472603192596794351096018521796896366264573122528432066220801060126176534804383644334108557770603223734647833908311459199230635341687331103117838567531014686308180340705780501577321504594147603725680722041454809739359800413824143166243330793129807697256340471401399108236770729297232197965492969147022643325465458060398463387063298839959447556622220819362003143420932710462888084191917159401950849874765676848420643202117564873299326321691572729197931220605316736591474226531410045951214596737594281602588563197375831919980113252574619577754856098633895500856319885501263091501696773499999760581053861183041803201789843536246735754218391558045318111060363405120366399793379137788912302211284471182331595430367844285283283545749722066280054875819421359324918838352612943720836014820439127683971145552505774488370160983044961217366770475652394621284237304059751834057680814397819179866801834773903897844254526875978888989531240168732105181511223114117373143212869719429356902181592253303385921 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 85984b814877b3f0022d13f7cfe8ffe79c65b041 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2x.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a2x.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0068238bb25aa5988cd5efec48b65c34c42738945c068b80a48932a81cdd21df32b659ad410c9dd3cd1d8ddb524ccd77594d634c50a09bcfc19706cde6154f5470a26993eb2b64ca51db20070b65bfff49c40087323fb6004457d6e9137eb0fc8d44de9a3c4f3992d6213fc1b10059ddefbc20ed72a2948da6b463329b3c45c6c16bf1cf7766f090fd02fbde10d38eef9ef2fe2c89368d42f3c1d8a1528d579183784ff8fdbc0068fd80bef331c0a056106bada0ee4d971d537bf87e8afab2580bceb1df2b652917785abf868590634e20e05ac732603f44d838570e3f968ec6e104d0128e5eaacf782de0bf4375c4ccbbf3aa3bcce0bb4b7f3bb5d697ab766271