cl.sw-t.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5b:fd:38:c5:6f:eb:09:4f:d2:86:dd:46:e2:87:3d:f4:93 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cl.sw-t.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:fd:38:c5:6f:eb:09:4f:d2:86:dd:46:e2:87:3d:f4:93
Serial Number (int): 292639142641145559974283942694929693537427
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:25:15:11:3f:24:eb:11:97:b0:31:53:0e:a8:38:e5:1d:16:47:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bf:69:2a:22:fc:50:f7:a1:9b:33:2d:27:bf:94:b7:88:48:52:58:e5
Fingerprint (sha256): b2:ac:ec:1d:5e:4f:a8:ed:f9:a1:89:00:c2:c9:49:dd:f0:c4:21:5d:b3:89:d2:01:3a:57:48:9e:3f:74:8a:00

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cl.sw-t.ch

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cl.sw-t.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cl.sw-t.ch
forwrd.it
info.barco.com
link.ambassadors.revivalanimal.com
link.community.ambassify.com
link.socialsharing.cbc.be
link.socialsharing.kbc.be
link.socialsharing.kbcbrussels.be
link.socialsharing.kbcprivatebanking.be
shortlink.brand.ambassify.eu
track.internal.ambassify.eu

Other certificates including the domain name sw-t.ch

(limited to 100 certificates)
sw-t.ch
link.socialsharing.kbccorporatebanking.be
sw-t.ch
cl.sw-t.ch
cl.sw-t.ch
cl.sw-t.ch
sw-t.ch
sw-t.ch
sw-t.ch
link.socialsharing.cbc.be
sw-t.ch
sw-t.ch
sw-t.ch
sw-t.ch
ambassadors.lotto.be
ambassadors.lotto.be
sw-t.ch
sw-t.ch
cl.sw-t.ch
sw-t.ch
link.socialsharing.kbc.be
sw-t.ch
link.socialsharing.bankenverzekering.kbc.be
sw-t.ch
sw-t.ch
sw-t.ch
cl.sw-t.ch
share.kpmg.be
cl.sw-t.ch
sw-t.ch
info.barco.com

Certificate

The complete raw certificate details for cl.sw-t.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuysfXPXk0yASt6Mb9qYd
GppFxuK2T2SlehSkSShhr8DBKLiMgoUihlUv5ITSqxU1LUiLwP66lT1uM4ZqlyQf
okL/85CSe0g8RWmU6Nqsrmc3ljp2QnjkPLU5yKULIbysMGlbTzOYNul4otstiLHD
N7nK1yzm5Lbi2IG8zodZeT32Dw0UPJUTRoy31A101wriGOt7oquDv0XrQbdo5NEk
i/qWcgCBVt1bZe3UQ1A/rxRimulwGJAH81VeRHqiEzafdwZZRG/bjAFTvfnguTQU
jFvO9demb1w+vXMTghkvnfois3bpca2ovEJCj+MdVUIUGypovdsWM2Hc3nMK0r/c
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292639142641145559974283942694929693537427
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-22 07:47:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 07:47:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cl.sw-t.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23627827531965075293506929120071797752599459205443137002810192746790381140801797477642431851052622118198049305827405933684535290059965604417860680455396410018015479448483045478692920072541361674138840540390693573599853163565052222923153794968433631635190279066865705384905993608433930274982410353048689407914788545676061780610308239573880257753623722154485537585361389411760950116669500168338978583840944636972961299221157722566019963647901738046407325898863367983344607976686602195807818710579416371276320972181556589720096171128180324259869761138622305308567045814065420670595999764922850716982224693136018261400699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							172515113f24eb1197b031530ea838e51d164753
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (298 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cl.sw-t.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forwrd.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.barco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.ambassadors.revivalanimal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.community.ambassify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.socialsharing.cbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.socialsharing.kbc.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.socialsharing.kbcbrussels.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.socialsharing.kbcprivatebanking.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortlink.brand.ambassify.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track.internal.ambassify.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016adeb8f667000004030047304502200f4b58357ca6dab673a7660176ff4c47d4bbb4086edad903205bbee695368f94022100b4dee612af13c4ae0441cceaaaa582a5c5052984330ce564fbf27513cfa8350a007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016adeb8f838000004030046304402204c930d372686f9b6cbfd4e3497d90e156afaaf1eec78ef738e72d597843cb14702203ed2e1744b2b7ed6898a601533b41e18c2e45833023f121b65764d7e7ba09052
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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