careum-weiterbildung.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:98:a4:c2:93:b8:ba:63:e7:40:f2:ad:a7:ab:15:92:e5:55 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=careum-weiterbildung.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:a4:c2:93:b8:ba:63:e7:40:f2:ad:a7:ab:15:92:e5:55
Serial Number (int): 313278781260312546972988636560816579208533
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4f:22:93:f3:2e:f3:37:af:18:40:53:29:3c:03:8c:e2:a1:36:99:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e5:6a:67:cd:6a:33:61:da:b0:7b:78:fe:c1:5e:1a:ca:dc:a6:58:c3
Fingerprint (sha256): b5:49:0a:89:1e:9e:8c:c4:7a:35:fb:86:68:03:b3:f6:e1:14:89:3b:da:cb:1e:ee:fb:ff:62:04:ab:9e:8b:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate careum-weiterbildung.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careum-weiterbildung.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

careum-weiterbildung.ch

Other certificates including the domain name careum-weiterbildung.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for careum-weiterbildung.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313278781260312546972988636560816579208533
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 09:21:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 09:21:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'careum-weiterbildung.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818890149065835220696074545216435662329267342068307927112465817297463259123147042268066002980056382891638307957078679104519852551070088225657451032480888130376829034344272133790259075699726987092951020321919066592309050326834858446838403720808245099367103969919745559932354043690360012455882210920829628538545688088563508270296689131858778936709608575370553851058972685481832600647285282837927774071895903953336360848322302024471432454684167635403446192203720195537192694687532926019542470264828519708066016333865991673243603506855426976379741664118775964968584593548504555371448991584274185024961109358962052525914066864416867614381342069532471398223999274874408140761941782763405682120799936369581100411102189457778967246443602882285160577187560248482116383982073955322318025368207610989201686468834360867341399551187595478807543059714594580685663992386979993490693777843467427979621148459138226500617858724031767902223826503544014862075745083424426662448863617059885673980887821983863816738604982528024232110584137880495377517264203579440149852558134708131199858305873936407682926027131032739681540173031107369809974317322296403347571117443343965005519703488020654322429868257466338292763819060808727663020519331881013069410158903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f2293f32ef337af184053293c038ce2a136992f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careum-weiterbildung.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ca5a5382200000403004630440220281fc4213d0d3f76f72f302ee7447e9cfbbca171f690a40530e395993f8c835002201278b1fff0b38ba0819449c5192d76fffe1756eae25945d06a80ade61a9ae4b0007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ca5a5380a0000040300463044022077a07039f2972284f65a662a99a82d0125726fea326a0859aa15e1c4776d6b6502200b00d25b7250f390d63c40923dde14b1d96a551909017ee599c9cd04ca92a62f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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