www.cura-domicil.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6c:22:d3:7c:61:8f:12:1d:58:b1:e7:1e:19:05:42:2d:1d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cura-domicil.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6c:22:d3:7c:61:8f:12:1d:58:b1:e7:1e:19:05:42:2d:1d
Serial Number (int): 298133645271984132854569244938852957826333
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:17:c0:6a:f6:6f:55:68:b1:8f:e2:bb:2b:2f:0f:0b:7d:d1:19:2e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6a:12:90:bb:83:a2:a7:b8:ce:2a:c0:28:3c:4c:40:d7:c0:3b:ae:3c
Fingerprint (sha256): b4:ba:4f:38:16:44:12:d2:0a:ee:ea:92:4b:6e:45:8d:62:e7:a3:d5:29:07:bd:af:95:18:7c:a3:b2:56:74:6b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cura-domicil.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cura-domicil.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cura-domicil.ch

Other certificates including the domain name cura-domicil.ch

(limited to 100 certificates)
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch
cura-domicil.ch
www.cura-domicil.ch
www.cura-domicil.ch

Certificate

The complete raw certificate details for www.cura-domicil.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298133645271984132854569244938852957826333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 02:38:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-18 02:38:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cura-domicil.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 655080273271657465531621815880185648699569983024462370652166629995973793316867335483004456521826276226835875320459084308214827281925175961771996004634634932144637984147513908462591298607582432001380375906117972482752380048504154423781533505701598751792629561240504587773045647110220832087280823903350425141611722586565421906730925235514332462711877338005261285015964100478557517228426844713260125821807599128947389845022231307665117503179012163497663766182006241412472376186534256086870553404479888071063415763609167438481875447417705141732402699470961446557716007211925781107389214963260611394667899129194345067008093058415777342280950799030676068648791588703557678127317931692295116362168555339426607908222518022811068145159414201875675309073053028214576416766629050870849144060722534681114286658400790846027379702046890710537129653094013281611935974437020515305740463373337261207076799926160208393218629403706895947937559660299784415877173517037696054630375572892173877119963067516964444479991842626849194485318744648675923106642411677055430235498527939005676968193002501716666887190025707294224916307870392126268609802475285098887425468473336027519299444955651053145401617096003569392752623773274728454676850570104214228179541181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8617c06af66f5568b18fe2bb2b2f0f0b7dd1192e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cura-domicil.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167bf65050b0000040300473045022100ea6c86e93b6882b20fbacbc9b8879448ef216336d8a2d9298168e45d0aaf4df402202c34bc3d1304999cd4d61ad697d2115d4a5dda1672a214035bdb07969d017f75007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167bf6506fe0000040300463044022067eebd70de333cbcbcfb23e5c3025b6c45e05bff43f81858dafdbdb5a3b6716c02203fb7b0fa13c96ab55f25e164ecb0321fcfd9fe964695450c7640c2b296290a72
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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