dihosting.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:02:ee:15:ba:04:f0:95:be:13:b8:60:71:27:20:4c:6c:71 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dihosting.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:ee:15:ba:04:f0:95:be:13:b8:60:71:27:20:4c:6c:71
Serial Number (int): 262333891603273012435115160169981726714993
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:7c:81:af:f8:fc:a8:a8:fa:f2:e9:d1:e9:ec:b9:ee:a1:9b:54:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dd:df:de:76:5b:70:81:7c:1c:57:45:a6:a1:ba:c3:12:82:e1:8e:a0
Fingerprint (sha256): ab:87:c3:59:7d:b3:19:44:2a:86:62:6f:47:a5:5a:55:2c:3d:2a:d6:6f:97:04:75:57:30:b0:c7:67:36:c0:2b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dihosting.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dihosting.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dihosting.ch

Other certificates including the domain name dihosting.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for dihosting.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgISAwLuFboE8JW+E7hgcScgTGxxMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMDMwNTI4MjJaFw0x
OTAzMDMwNTI4MjJaMBcxFTATBgNVBAMTDGRpaG9zdGluZy5jaDCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAL4dw4vgRHPN5bsWedTAWHYHMY/jbAYpc+W7
AGtNIUInCgiECw21MZscZzgS3QpP/gAaiz8gGAvJ+bOh6ZKHXu3HPIU5/xqMLk4U
GgKXtylJqgWuCuFP5h0CQLAvAK2LPDZxxkSqA5FDpz2Azwyq8dRlg9o6abvBESEw
8eC4kpijmj3WslJxZeBdinI9ZdtRfrITfuIFkkcQx6ar8rhhTTFv+Yw4fhH2Pix/
wV3zV1uslk3knNKRX6QjHkAfs/7Wj3joZTU17Jf1DlyM3UExDlImIhqA2pTXtjFd
pthwq11JcRoNNKmdVcjlQFkEOaRSYcbah+LorQscT6Y6QecNk2jZnXbLIUNmF2t0
1MUELT/vFLTftB1FMXx1vWew5aFQ0Wwx4GUe5bZoZM4/ys+wmpRslyBWRZStmguF
4ABCvKzNUuY8xvgzFY4G/fY6FBTKMAdhGdGmQ+wSzpSoq32lCdv/ZyLTuA0zFZmp
Iusv3Qo6mvd/YvMfZZ2rE+gA2ewZ4qpsCsMYrh3r+PMrSK2Q2cDPsJQvdicigcBq
TsoPuWHWf409w6kzGsCvEEJY9ySpGyHo6UY66GDbKiFo5jr8hPvhkr6ju8ql0Mbw
5PCm5J/1wsXaAlU2fqD8dLPYbLSQXHhtM3VOSIuPjUND6IdEa7By+9GlNRYSkcck
H3MY9rY7AgMBAAGjggJgMIICXDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCl8ga/4
/Kio+vLp0ensue6hm1TjMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMZGlob3N0aW5nLmNoMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv
AHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFncsDh9gAABAMA
RjBEAiAyGZfoPO0uFzH9iii+iEseBLu9EbsC9JznCEcZYLTZ4AIgZG1+hz/xdtIE
DqJHnKKQ96mNSOqt3sFnZ+4CgDiUWqwAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9
daY4scdoVEvYjQAAAWdywOICAAAEAwBHMEUCIDbLr1jg0EIv5rcv05WrJ2sH9PER
nsmIBOtzh/pxaammAiEA2Uci1/CMVjSXvVWurYllM4nTNrC72FACUro2ZvkLSnEw
DQYJKoZIhvcNAQELBQADggEBAI4H58oJg5IOljEBqye7qfWDln14pHxo6NvKo9uj
Mss3nS6huHMUv9zsWz7FtPYBtgh4hYOEhzmmDtwWOub8KqKAM6NkDZJLkyIIv/LA
HZjo6fphHjM6TX5Hmjo4gm8S3TY2ueH5GWd34/OETMQ8CUOlFgyx07U0Fbfid4Iu
sPEaeNfMWPch9Pj9nQYI0xqPVTSCD+63NCV5HFJ3BgYuXXKDKZP88eEWxLaYtQfl
WBbDRFkEZmjr9wSL/6Gk/oq4xk+7zr+3XIBqDLh4fzf5aniYjK6Msqi3VTleDWKv
Tcni6WScb8QeM4jJoe6LogBvzUq8mQhy+U0/XWdpYDNAnKE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262333891603273012435115160169981726714993
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 05:28:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-03 05:28:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dihosting.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 775606692949981148299350175549976974193097826720492579114970516668934415318315894626956619922603514055310031069107507238307788391984318044104924187361366831866476030723866256440860865664558715247267156169769724080977573961028553543572939287015434952654614610451149190512662287814876667875600543963479908064101172142502718895839417942595902016809032922285564440771525217255315847744638996954779579459354105284131796537487469497681617693891204722265354852512574986816144405910333367990604007896888421427265007538962468380918051125058020825590713390902120014174745801360076939840463738892282902394290505128639241086264595379004344444864149893510583008769352374774987222313827811892547653463196448910993715436831964381282810397891360389624167152227040568240786953627396139871056887013577309155974320005322967183901253945841741044808714007702616332268687380611403078071724647823038902306904320608632482632611930829544739139263023687291976049861441755552517916076565432637385828543155434916453345426060300100981554121689030041285110919703440028533081669940003859480598288082715231048421876249722421189141014477682818156053196628570720979951759761954206166927152711157446415340477449427890390535669215873569950448655187119691302810089338427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							297c81aff8fca8a8faf2e9d1e9ecb9eea19b54e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dihosting.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016772c0e1f600000403004630440220321997e83ced2e1731fd8a28be884b1e04bbbd11bb02f49ce708471960b4d9e00220646d7e873ff176d2040ea2479ca290f7a98d48eaaddec16767ee028038945aac00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016772c0e2020000040300473045022036cbaf58e0d0422fe6b72fd395ab276b07f4f1119ec98804eb7387fa7169a9a6022100d94722d7f08c563497bd55aead89653389d336b0bbd8500252ba3666f90b4a71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008e07e7ca0983920e963101ab27bba9f583967d78a47c68e8dbcaa3dba332cb379d2ea1b87314bfdcec5b3ec5b4f601b608788583848739a60edc163ae6fc2aa28033a3640d924b932208bff2c01d98e8e9fa611e333a4d7e479a3a38826f12dd3636b9e1f9196777e3f3844cc43c0943a5160cb1d3b53415b7e277822eb0f11a78d7cc58f721f4f8fd9d0608d31a8f5534820feeb73425791c527706062e5d72832993fcf1e116c4b698b507e55816c34459046668ebf7048bffa1a4fe8ab8c64fbbcebfb75c806a0cb8787f37f96a78988cae8cb2a8b755395e0d62af4dc9e2e9649c6fc41e3388c9a1ee8ba2006fcd4abc990872f94d3f5d67696033409ca1