www.honegger.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:ff:b0:4f:aa:5b:56:c4:d4:7b:21:7b:36:f2:18:34:25 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.honegger.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:ff:b0:4f:aa:5b:56:c4:d4:7b:21:7b:36:f2:18:34:25
Serial Number (int): 271204632668046686943023822719804933420069
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:d7:21:d7:7e:7f:a1:2b:55:cd:0e:00:f5:d7:57:41:f1:d7:b8:d3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5a:f1:9d:23:ba:43:b9:ee:f1:3a:9d:8b:58:26:d5:5f:00:bb:53:1d
Fingerprint (sha256): b6:62:5d:60:6e:46:b4:15:c4:99:5d:29:68:20:cb:91:39:c6:ad:76:c1:62:7d:15:a4:27:f8:e8:cb:80:f5:d3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.honegger.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.honegger.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.honegger.ch

Other certificates including the domain name honegger.ch

(limited to 100 certificates)
honegger.ch
itstatus.honegger.ch
www.honegger.ch
owa.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
www.honegger.ch
honegger.ch
honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
itstatus.honegger.ch
citrix.honegger.ch
www.honegger.ch
*.honegger.ch
itstatus.honegger.ch
honegger.ch
owa.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
*.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
honegger.ch
www.honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
owa.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
*.honegger.ch
itstatus.honegger.ch
go.honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch

Certificate

The complete raw certificate details for www.honegger.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271204632668046686943023822719804933420069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-09 19:56:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 19:56:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.honegger.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1019464391871159894685515620919821473757331131507838444177556666522494005491734866681587610036693344418749350581610667123803364244592646019092954802483667036545832597970088931761795184277464876302607588894421729156790750825500474736115377970835877585131487132180653005587973166199103203676125909713570839363689351253345196781079441387239033037844007841007107554926854267906117453783227594281401659498805022013769359223939973299478021995128198148685804440401505794091238352408816118337402594870352766810081410595518612320647730915463956982362581524306308224400306651725838314389046166501122596053763219148482502753001229941575556581053199346030420093556083916908867927110370443255115371180478228207576127666752392401475423905236960368445249806569321621526654667312093567712607642015767921739969207435207407636399820427520239036003917305596050408709185724583539360386590274015785809179406311506123413190510961617669770902773973063555371197520569946164077265596313776379476232385347532860963656441708629331590214095358873250494713995770568079669519473013469374222002090431465592118567340081119992584015031244939097167348092810230684689697506113095668649685322343960266022095655591539441066577158897598813392002372787710367626921842150481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3d721d77e7fa12b55cd0e00f5d75741f1d7b8d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honegger.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001652079b9bb000004030047304502204a6190f55911a72e440ea583eb6904a55c0b31a99c1a4fb4b075dcc24a702b05022100de8b23123ab6949d80d8147262a482bffff83552f24a6e12a4439a6c577c1cb5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001652079b9cd000004030047304502207bfe0de06f61d1cdae852b2f09c1bf3bf1cb3e5910cb9538d7b9fd92552284e5022100e85fad5a3c246923baf7f36712727f8b9cc9cf1bd45f53cb0a2c825e8574fab3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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