www.spitexsense.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bc:9c:81:04:f3:bf:fe:3c:f2:fa:8b:6e:a4:ac:15:d9:a7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.spitexsense.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bc:9c:81:04:f3:bf:fe:3c:f2:fa:8b:6e:a4:ac:15:d9:a7
Serial Number (int): 325517972250495869837354328478358816807335
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:85:37:6a:f2:d1:e0:7e:5e:b1:10:af:6a:37:4e:5f:1d:14:49:58
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:8c:51:65:6b:a1:2b:a0:38:b7:42:be:09:9d:0c:3a:c5:3c:b6:6c
Fingerprint (sha256): b9:47:a9:40:c5:ad:df:4d:f0:46:4a:ed:a1:c5:03:6c:a6:65:1d:08:04:35:70:72:c1:f1:b1:33:68:04:48:ac

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.spitexsense.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.spitexsense.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.spitexsense.ch

Other certificates including the domain name spitexsense.ch

(limited to 100 certificates)
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
www.spitexsense.ch
spitexsense.ch
www.spitexsense.ch
spitexsense.ch
spitexsense.ch
spitexsense.ch
www.spitexsense.ch

Certificate

The complete raw certificate details for www.spitexsense.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325517972250495869837354328478358816807335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 01:58:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 01:58:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.spitexsense.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 650299273126955995509451509215584266422974232524265928508695154985625522819693667397571408919095349524675983880075728309628838080800907915429325145983176443467081249530860217203240365554912917357117338860143777470986738275349956506684145829289531063178795496596449002566514451259628820917306547856586079776271850098678985276623909428037443964550692872465004597576461100644816063496312837829965617201389059917291080622124545504997250943601041954293954176386071850462325326899356363522616314690852753603641205916632121590755750306753549397887976565223139300592372522419810861550721317242506459918788653478357022534049709286564127260022579103141211509070009708556000140649025937747573795532394365868149373910690682735857193500239070043249743257531143504038808621763266303559446705267587703664467665143587467440245737813831656205135435349459325133815313295986832183120925525726028296121373050640023298013330793376767488019375639696051926811036755933485899023032163830635644147921681564484924333169862028403227358785816791158251956203202408457302952512296272243221524487383633962950404769006682689543665450523418552464427387451093987858182206035924800315097572190653882498728316186899251535542839265232333037441670838222784582394108022569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3085376af2d1e07e5eb110af6a374e5f1d144958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spitexsense.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a4d4825e20000040300483046022100e734fa16267c6f12905a6bccd94000b02aceecad857293688d34a206e207c8a2022100a4d1c6537d085c0ec052d155cc9bbf57a5a38887ec1b792473db86bbe8f944e7007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a4d4827cd0000040300473045022100b7405f6e1a1b127471311f306a2f6d4a58ca2e5bf1e2a5a5b5250ce95aa16727022066d3d289847815029df6bc6bce03185b01f07fd1ab1bbccf8c2971ab5f635e57
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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