portal-t.miduca.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:3a:56:48:ef:fd:4d:0c:31:ea:3e:90:12:a2:15:5a:aa:86 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portal-t.miduca.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3a:56:48:ef:fd:4d:0c:31:ea:3e:90:12:a2:15:5a:aa:86
Serial Number (int): 281187927397270953570847598919536938232454
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:8f:1c:52:1b:4e:95:9d:94:30:3b:d1:c8:66:b6:7e:2a:ad:27:63
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): aa:ae:85:45:e1:4e:19:c2:f9:16:b0:22:93:3a:ef:cc:40:60:de:14
Fingerprint (sha256): ba:de:16:54:ea:3b:65:98:67:b7:1f:d1:cf:ee:08:ff:25:ff:ac:eb:5f:6b:60:8d:15:7c:ae:ef:52:00:bc:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate portal-t.miduca.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal-t.miduca.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal-t.miduca.ch

Other certificates including the domain name miduca.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for portal-t.miduca.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgISAzpWSO/9TQwx6j6QEqIVWqqGMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MjEwMzU2MjhaFw0yMzEwMTkwMzU2MjdaMB0xGzAZBgNVBAMT
EnBvcnRhbC10Lm1pZHVjYS5jaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKy3fWCWWC3QO6MoV/B0i/zjCpM7Z9ghQ5flZ1Y3MfpYLNb/vDdVC1Bii9k5
FGaqNE4KPeCoI8QgPCu4aT3j+mALHvVaC8OpAtC8PXKQCerTXDX/NgF0OUrYrJdD
kLdOgz6MOkazV/wYz/RaqQFYcVJ22Y1aNcmggN56YjLGezWUwgVJ6WYK9T5oWL+u
Fm4U9GZMUnHp11Esg+IbLlFGbjQmnC3SgMbgngfY4ihR/UvK4Lv385DMd/Zkzfp2
N3fvkyHFjReudGJWjrxevJFgEg59vSB/qOnQ92wbdSuwrctU28rc86SziGFMB7zd
Q9NuYgsmekA3I7kOAgI8OA2eLwECAwEAAaOCAhUwggIRMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUFI8cUhtOlZ2UMDvRyGa2fiqtJ2MwHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wHQYDVR0RBBYwFIIScG9ydGFsLXQubWlkdWNhLmNoMBMGA1UdIAQMMAow
CAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAtz77JN+cTbp18jnF
ulj0bF38Qs96nzXEnh0JgSXttJkAAAGJds50MAAABAMASDBGAiEAtlhnkEChPWDl
bN+1CoEl2M0ExRpSzTr/QfakLEnb4SwCIQDvaWYY+UZK2T1agrIQTjVl/JpAHWqH
wGwtx1c9S1SI5wB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAAB
iXbOdEIAAAQDAEcwRQIgST+F+PyrDqqcG+ZUU4sQYIub8smfwRjS3JihFt1/xvMC
IQD7G8/7ewLSvXe40qY4VonkHKXHRMW7/cgiuMZbJLLAJzANBgkqhkiG9w0BAQsF
AAOCAQEAXdKeZ1IPtGdNbxATzjw8FqaMTRXRy5W1RS0+5UJR7oRC5zyICm/12iTS
klcFc1jMaoTwfMKs4qwZDvEFMMMUzgjVLuEQgYc9bs4PyaebShg/OVB3z1jebzK1
qZ4l83/5xCf72WDObps2mHxz5sDEmhilQ1ZycCBrPpRsKZhoR8tKsZBP4Yp35u9/
6FSwihgIb2yR6h1aQ9Tp57ST121Kev00n/eQe2pVe1Mg7bX+Np8tidP4dMHs6px5
fGrPmR2/snwji6rt0xQ/hzkdu6dL4hu2vZ4xuxTSgEFXfqsI/zPqs7ZtRfMp8fwL
e8jh5iL5ljtRPn6kczBdFR2CHvHNTQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLd9YJZYLdA7oyhX8HSL
/OMKkztn2CFDl+VnVjcx+lgs1v+8N1ULUGKL2TkUZqo0Tgo94KgjxCA8K7hpPeP6
YAse9VoLw6kC0Lw9cpAJ6tNcNf82AXQ5Stisl0OQt06DPow6RrNX/BjP9FqpAVhx
UnbZjVo1yaCA3npiMsZ7NZTCBUnpZgr1PmhYv64WbhT0ZkxScenXUSyD4hsuUUZu
NCacLdKAxuCeB9jiKFH9S8rgu/fzkMx39mTN+nY3d++TIcWNF650YlaOvF68kWAS
Dn29IH+o6dD3bBt1K7Cty1TbytzzpLOIYUwHvN1D025iCyZ6QDcjuQ4CAjw4DZ4v
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281187927397270953570847598919536938232454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-21 03:56:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 03:56:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal-t.miduca.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21803470624696370701271923967356067118161349987773732668828630591742992887702952148279225816074297248676151802566921495697583938464883056683046870901445032127359570854974094057797248788619139727522467547172988170568968805332014956301532583786372141202284596746298882756629744994534345835094564860277199414184669180529847244522100000497670823183342808748352683618260002365830149821252545787927008515017330677363088758527321558021891977879410774827526245239834030480699724761586750697934819516307316034065417249751364000640551270594038244505714884722737857876282912905662855155154639165089592410502419401329354504810241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							148f1c521b4e959d94303bd1c866b67e2aad2763
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-t.miduca.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018976ce74300000040300483046022100b658679040a13d60e56cdfb50a8125d8cd04c51a52cd3aff41f6a42c49dbe12c022100ef696618f9464ad93d5a82b2104e3565fc9a401d6a87c06c2dc7573d4b5488e70076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018976ce744200000403004730450220493f85f8fcab0eaa9c1be654538b10608b9bf2c99fc118d2dc98a116dd7fc6f3022100fb1bcffb7b02d2bd77b8d2a6385689e41ca5c744c5bbfdc822b8c65b24b2c027
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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