ropeglider.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:c8:4c:9f:3c:8f:ad:47:5f:cc:fb:fb:93:19:a6:4a:86:af was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ropeglider.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:c8:4c:9f:3c:8f:ad:47:5f:cc:fb:fb:93:19:a6:4a:86:afSerial Number (int): 329495179310676423927958665659436025677487
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 49:bf:19:e5:99:54:dd:f0:69:cc:d0:2b:76:a1:60:43:66:0b:52:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): fa:ff:6a:9c:bb:52:f7:db:4f:77:d2:ee:89:7d:90:17:da:29:3a:a7
Fingerprint (sha256): bb:5d:f7:48:a7:b8:28:f6:fc:b3:59:cb:31:88:9f:bc:70:4c:3c:38:a7:cb:35:cc:c4:e3:8e:32:14:4e:bd:09
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ropeglider.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ropeglider.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ropeglider.ch
www.ropeglider.ch
www.ropeglider.ch
Other certificates including the domain name ropeglider.ch
(limited to 100 certificates)
Certificate
The complete raw certificate details for ropeglider.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgISA8hMnzyPrUdfzPv7kxmmSoavMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDUwMTMyNDJaFw0y MDA0MDQwMTMyNDJaMBgxFjAUBgNVBAMTDXJvcGVnbGlkZXIuY2gwggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCsIOe9cct8BPw9xJQapPDRrQ/PKewoDd71 zro7QR5BCFu0uQLnEPwXKZ/wZqC4D+jqKTszBU+fwDwZxmoxjMsqTIaeLXFFAgRk hpPY1dad2z4lfLyBi1G0vsrV9I8DjIuQgRoTBfqVxdp3o+8W76nXhkffbqLezfAC /9iRmVTDRK99Sy7miEnvLhSJR7cDc8XZQekPwEBBPFDCVNYhoZKADlgIJmTM7d7m z7V6i0MGASydaj0nC7YlTQMGUY7bj3/+EIVbSl8564ZzySPloLhqxhyJgHYMcjhA tWENlQOdKm9eyNTjYbM1olBp+r8N4u5umW3tqaYhBRusfUelFKSvI6+UR7uRWUhv 28A4+JnV22DVY431wzzaiicQSSw3BHRZkve7NFiBexlEcYaLGYtxsyn46PjKT4vG c4pfUIHgLQ9kJfElxiBl+3p2hfdJSoHfBS3jni1uNn/FI5ixA4YaBKpaP1wECzHx xgp1RBkY7sEGBmqmZg7CCLa1kFkz4HM1P3vwsEwQ2l4drw1KcEYD5mNBE+cBH0HB sqXMB8ntqObXaCbXChJSBvMZuTL/NacjtVh0kRI9/gon3BTWvVA9w8+5+x7qvFOk z1AyaADQ6lTvAo7ZSjlrBPvPb27Ig+K5ih3TI36vtZeS58Z37wPzNLq5Qy509lqx +56sqmSc8wIDAQABo4ICdjCCAnIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRJvxnl mVTd8GnM0Ct2oWBDZgtSITAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDXJvcGVnbGlkZXIuY2iCEXd3 dy5yb3BlZ2xpZGVyLmNoMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB BQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQAp Bo2yCJo32RMAAAFvc4wmYwAABAMARzBFAiEAwlQiJmMDoH6wRA19dcntUY8CUmzc dtv+FuB5WW2VfaQCICaAY/0cLTnqedW2NTTa/SihMajp5qkdcI7Z8dAKo1NZAHcA B7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFvc4wmXgAABAMASDBG AiEA5tpFTwr5J4ocKECjktK4Z4jADNkpom77UIDAYeypA+ICIQDneyKNwwIQ7Nfg Z4L3EqTjpZ1ilyXHNMqW4zIAHrlw8zANBgkqhkiG9w0BAQsFAAOCAQEANH70MvhS AlGC/oLABvrsp6q1zFh93+iSr57G5uPMWL1qs3iqtG5NfCMEwWxjwXLY6cDG/kaB KiwBGG+/sxxUg+bd+X0yG5jZZGAcQSQy0MOcXFX0ViDTnL/RaU/EVLS98fQGwFfM q1X9B+7lhNEn5iH9j9lSLT3apEKAP+Ahiv1+/OkvfQOHog2r0xvn5LYLzYidbmR5 Hrjds11Nl2gaHTaIxeyv1rUVqxgw1UP5mieu1Kxlp1QcsRpzSkjcbPsoGKxxcLG4 GCDIJAlsy6jAz5MfP4u3Zs4ANL5UUWPjdZnQaGItKPsfPs79UXsM9nMDQc0dxf6I nLBOtXTSjzcGhg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArCDnvXHLfAT8PcSUGqTw 0a0PzynsKA3e9c66O0EeQQhbtLkC5xD8Fymf8GaguA/o6ik7MwVPn8A8GcZqMYzL KkyGni1xRQIEZIaT2NXWnds+JXy8gYtRtL7K1fSPA4yLkIEaEwX6lcXad6PvFu+p 14ZH326i3s3wAv/YkZlUw0SvfUsu5ohJ7y4UiUe3A3PF2UHpD8BAQTxQwlTWIaGS gA5YCCZkzO3e5s+1eotDBgEsnWo9Jwu2JU0DBlGO249//hCFW0pfOeuGc8kj5aC4 asYciYB2DHI4QLVhDZUDnSpvXsjU42GzNaJQafq/DeLubplt7ammIQUbrH1HpRSk ryOvlEe7kVlIb9vAOPiZ1dtg1WON9cM82oonEEksNwR0WZL3uzRYgXsZRHGGixmL cbMp+Oj4yk+LxnOKX1CB4C0PZCXxJcYgZft6doX3SUqB3wUt454tbjZ/xSOYsQOG GgSqWj9cBAsx8cYKdUQZGO7BBgZqpmYOwgi2tZBZM+BzNT978LBMENpeHa8NSnBG A+ZjQRPnAR9BwbKlzAfJ7ajm12gm1woSUgbzGbky/zWnI7VYdJESPf4KJ9wU1r1Q PcPPufse6rxTpM9QMmgA0OpU7wKO2Uo5awT7z29uyIPiuYod0yN+r7WXkufGd+8D 8zS6uUMudPZasfuerKpknPMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 329495179310676423927958665659436025677487 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-05 01:32:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 01:32:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ropeglider.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702223161123311853629727982631875755212389869262166752143076377359886963839652876891191539999247888195487171074511837600629007016342893276645209837820314281313629861081828873654273503759667437986322487576930224650816716726461266564445039130708587701622886720108708367826293160909873652433112840200828630940404947279144186169366418418230966456351281885021262930275858418432672865824262582288627444407268623156859769947719135713630883622050224044578240798257579120424465144593857764249652982898948072151789537859797349436105978843211993642355153084745155926961766984503178657398520149004881327887179820036363222716048413893611125953391276701885042552277529481194731496809971897513956848034911910554941836675916361185949488188272021597553724433073365523545916301388599193790249558414475009148898125978370772840814920052872164814850464955202153159854393479565524062465300246858457418343833097515576092501392393834916102903071481094405155138815398108966137356279438765721303482506565750768954857771111210441990887358069873221456911936563397111778258271037518735814746942668825063748455031625206233509956811948948916905334873158643263699016436609017001020171547112531904697142341875274049977435938234449184454499607238994823626917287337203 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 49bf19e59954ddf069ccd02b76a16043660b5221 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ropeglider.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ropeglider.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f738c26630000040300473045022100c25422266303a07eb0440d7d75c9ed518f02526cdc76dbfe16e079596d957da40220268063fd1c2d39ea79d5b63534dafd28a131a8e9e6a91d708ed9f1d00aa3535900770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f738c265e0000040300483046022100e6da454f0af9278a1c2840a392d2b86788c00cd929a26efb5080c061eca903e2022100e77b228dc30210ecd7e06782f712a4e3a59d629725c734ca96e332001eb970f3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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