meige.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:3a:5b:3e:1d:c6:9e:40:4b:32:00:ee:56:0d:b2:ee:a7:df was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=meige.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:3a:5b:3e:1d:c6:9e:40:4b:32:00:ee:56:0d:b2:ee:a7:dfSerial Number (int): 368306803282403105012745440074118976153567
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2c:59:0e:5b:d3:8e:05:66:34:36:92:b2:65:3a:eb:e1:9a:d3:ff:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 68:16:58:3a:15:d5:b5:8f:e6:dc:c1:7e:65:38:66:b1:2e:54:ef:bb
Fingerprint (sha256): b5:eb:99:1e:60:06:83:0c:2b:50:3b:92:99:e9:c1:24:f1:90:98:43:c1:7a:39:d5:5a:6c:44:de:e5:b6:34:97
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate meige.ch
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for meige.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
meige.ch
meige.vhosts.ispweb1.nimag.net
www.meige.ch
www.meige.vhosts.ispweb1.nimag.net
meige.vhosts.ispweb1.nimag.net
www.meige.ch
www.meige.vhosts.ispweb1.nimag.net
Other certificates including the domain name meige.ch
(limited to 100 certificates)
Certificate
The complete raw certificate details for meige.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgISBDpbPh3GnkBLMgDuVg2y7qffMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MTUwMjAwMjNaFw0x OTExMTMwMjAwMjNaMBMxETAPBgNVBAMTCG1laWdlLmNoMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEAxv6HPXzWY3SqVm1NxBL2/CrzsTgyHiC2mYbbOPKw d2Lvc4E8Uv2OmOjJ88V/L2gnikJj/G2jSnJIWDHVgVLImdaZiOLIbFgrNvUzyXAZ aBFhsCGMZTxNtQ+Wlp8SXZENBuSe2XZZpPPlTxrIhSiKBtFu/oqP7rNyT3kwaoOQ KePnMEqp8m5zs0+I1rJNBhGyiCKNeivc5lMqL25MKbq7Ml9ICF29OKR9sh6887NM cjK55FHEBsIhPcVUesbXxEQDnlI+LZkx2SQPYMBCvkKVdLcybUoAoOFT3BE4W16j eFbUhVU0HiwFixgpE1VXRtrVCoMGiYhef/ivShlbVdebeLj7CQT0AEwX+o2OBBlK Rul8h0Mkd1ducTMoSgZndRarN1CIs1Q9NUjWZgmXoTyix5GpqXRJ5eByPF620A/8 xxHGHT0b7ORcy46MSV2Kb6SlvsAZf6FMINEBlph8X3/WFPbLZXMsPuRw0y83FyGD A+qv23KdNQTwugYaUg7XNJEGfblFMTprl8EkB2whKpgPSjY4+WpK04ZAm8QhSBAW RuJUllAmJCkEyVlsUXz6vzLhLMXFqjeuOfzy+uB+rPdWnOXuWsMKisy+iRn1lPvM 0AjTDvv1Q35ZznLXFMOtlS5GcUyQxQ5AHwRGd+GnFjY9qf8LZ3L0I/H1fusbdADT 8VUCAwEAAaOCAq4wggKqMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQULFkOW9OOBWY0 NpKyZTrr4ZrT/7swHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzBlBgNVHREEXjBcgghtZWlnZS5jaIIebWVpZ2Uudmhvc3Rz LmlzcHdlYjEubmltYWcubmV0ggx3d3cubWVpZ2UuY2iCInd3dy5tZWlnZS52aG9z dHMuaXNwd2ViMS5uaW1hZy5uZXQwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBvU3asMfAxGdiZAKRRFf93FRwR 2QLBACkGjbIImjfZEwAAAWyTOBnCAAAEAwBGMEQCIHq4Yb/D8itXKcBOYdilcdRI 874BI/BKdw8gOg6ouymuAiBZtP8XWfVf5DVHwShuJ54hesb/dXGb4P6XsU1dsLdZ qQB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbJM4GZ8AAAQD AEcwRQIhAPftim5w+Qf5+pRtdo3+7sZOMip0h94srKyTOniGbU7CAiAzZ+eFbKBj uXXJVSIQQ8wVFXCOVYoYCzGM3aXrqL3FCjANBgkqhkiG9w0BAQsFAAOCAQEAdRym MTelxlyr3SwNH1sp/9Nbf/nmGNAt7fogcylTa9k/FvhSxiFqCVNRlLYQ2CEm+3IV R8AYpqV5u6QpoSrQqwpM87esXorg3NkJ0LwXnWQ4xBGUTvYKonMT0zF2LGF+kwgB MIgfibt14aMx3gXMs80z/Ey8XQT8isNjkYqTDv0R8erqQpK5teJE5cWCULyvNfz5 h7H3G3KxefcAmQDqMs90u2hxIYd17jhuwNEnrZyxxv+dHd0RI52Uwwddf4L5+bRb GWAfq4HbxDZGx25rtYxqNCkv829gAKITfqZCUw9JybKZXlsxvh/ds5P4Oik8MheI Cav9WxA3t0NGmk3Bmg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxv6HPXzWY3SqVm1NxBL2 /CrzsTgyHiC2mYbbOPKwd2Lvc4E8Uv2OmOjJ88V/L2gnikJj/G2jSnJIWDHVgVLI mdaZiOLIbFgrNvUzyXAZaBFhsCGMZTxNtQ+Wlp8SXZENBuSe2XZZpPPlTxrIhSiK BtFu/oqP7rNyT3kwaoOQKePnMEqp8m5zs0+I1rJNBhGyiCKNeivc5lMqL25MKbq7 Ml9ICF29OKR9sh6887NMcjK55FHEBsIhPcVUesbXxEQDnlI+LZkx2SQPYMBCvkKV dLcybUoAoOFT3BE4W16jeFbUhVU0HiwFixgpE1VXRtrVCoMGiYhef/ivShlbVdeb eLj7CQT0AEwX+o2OBBlKRul8h0Mkd1ducTMoSgZndRarN1CIs1Q9NUjWZgmXoTyi x5GpqXRJ5eByPF620A/8xxHGHT0b7ORcy46MSV2Kb6SlvsAZf6FMINEBlph8X3/W FPbLZXMsPuRw0y83FyGDA+qv23KdNQTwugYaUg7XNJEGfblFMTprl8EkB2whKpgP SjY4+WpK04ZAm8QhSBAWRuJUllAmJCkEyVlsUXz6vzLhLMXFqjeuOfzy+uB+rPdW nOXuWsMKisy+iRn1lPvM0AjTDvv1Q35ZznLXFMOtlS5GcUyQxQ5AHwRGd+GnFjY9 qf8LZ3L0I/H1fusbdADT8VUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 368306803282403105012745440074118976153567 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 02:00:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 02:00:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'meige.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811825716076230939333954337249416778360834322124001545792535743117037520228138185642640998462565687582502065689214596693285986112056321414473671043927841022718615443478243588021937599208275393132112902393880764437586995320510257729437614428498430871913603557151126886960928376869226576426163743256542492554379250457289678162740290278517749912647177093941247279281149004675621577187468621568915607949713504529406354367531444018275952519573717007918818471694678425536957512729738334471759657920356388071383826240557879194999201482369859655751687927312857440068341727141180893887244722574950309361014912435543872925738557069825830666546107468453796373189253076382037537996278970301518162097841726383732302741513048302763759037861997095392492932816551200401884287101632924665982516068061211810421969360585147128333513513315943072332583518701455828656847361530604382317575720382377071619542997337488392469462204530741856062311957362623066446417161660101390404556953834262828695747883218570483919034672928335648418044929462026438601687449093856377709073064132398353657739825338973293172695891505693601618387101554167642301238820839991099549501097013837876392371008012235329183160373326095847402948614787502777509536657726289725421293662549 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2c590e5bd38e0566343692b2653aebe19ad3ffbb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meige.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meige.vhosts.ispweb1.nimag.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meige.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meige.vhosts.ispweb1.nimag.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c933819c2000004030046304402207ab861bfc3f22b5729c04e61d8a571d448f3be0123f04a770f203a0ea8bb29ae022059b4ff1759f55fe43547c1286e279e217ac6ff75719be0fe97b14d5db0b759a900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c9338199f0000040300473045022100f7ed8a6e70f907f9fa946d768dfeeec64e322a7487de2cacac933a78866d4ec202203367e7856ca063b975c955221043cc1515708e558a180b318cdda5eba8bdc50a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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