vitalis-shop.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a6:ae:59:e6:98:41:a8:c4:1f:60:33:7d:ad:07:c4:43:0d was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vitalis-shop.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:ae:59:e6:98:41:a8:c4:1f:60:33:7d:ad:07:c4:43:0d
Serial Number (int): 318055483166860719929727156224357552112397
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:ed:8f:29:82:c5:b4:b1:59:c3:d6:da:94:b8:27:7c:be:fb:09:65
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 26:f4:e0:f5:1f:6b:8c:2c:fc:2c:a3:a7:97:fb:89:ea:25:ee:13:8f
Fingerprint (sha256): bf:da:fc:85:a5:95:92:0c:15:2d:30:e7:bc:31:df:75:0d:6e:da:e5:63:5a:70:40:bf:42:2f:a9:0c:6c:e4:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vitalis-shop.ch

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vitalis-shop.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vitalis-shop.ch
vitalisshop.ch
www.vitalis-shop.ch
www.vitalisshop.ch

Other certificates including the domain name vitalis-shop.ch

(limited to 100 certificates)
vitalis-shop.ch
vitalis-shop.ch
mail.vitalis-shop.ch
vitalis-shop.ch
vitalis-shop.ch
vitalisshop.ch
vitalisshop.ch
vitalis-shop.ch
vitalis-shop.ch
vitalis-shop.ch
vitalisshop.ch
vitalis-shop.ch
vitalisshop.ch
vitalisshop.ch
vitalis-shop.ch
vitalis-shop.ch
vitalis-shop.ch
big.vitalis-shop.ch
vitalis-shop.ch
vitalis-shop.ch
vitalis-shop.ch
vitalis-shop.ch
vitalis-shop.ch
vitalis-shop.ch
vitalis-shop.ch

Certificate

The complete raw certificate details for vitalis-shop.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MVSaOmhfJ+94aZA/jTr
umHsvp1uMapundgIqWXx2HGtOLaqMmZU24GdmGMp05rZmaUV/R/kom2hEtyzdrnj
LiNi0+ETWAuX5BI/pEcsOeMeUnbMKtHbG7HgpHRRu0EXGFtEylL2q2JVTc0V6brJ
h5dxQPY7CaQt3WL7XwUd5hCQ6abN3u0FmtLsfONRfV0LjZT8wqd8+vCZ3O/z7iJ/
vCK+RzFojUQC47Q9eveqo/FVj/I2/oYV+bMw0ARlUECP2iguis4DccZEoggRWm3N
ScQecDK+1gWjY2PmlSGwPikqn/tB8zEUQCYiFxLFYYHOJvUV8XvdmFI2WzNDqM4o
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318055483166860719929727156224357552112397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 09:05:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 09:05:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vitalis-shop.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27364776934671176170126359348107783374575206553318669927839166901914605064335070999596816489164753848529403829958709633512992590507420276459843897426397793188366330761986813094837348511604110947063247544369669446218274811652953697616758561432557805130605673808147151994573449053813027286621618278277006148269144864307994298390830345078556939805211954688228126692437099838563190446928176007373998639250294432551926527971887601846586814541845405706578537761080972032100468733095617954876258981754210184380232983491096338258890288378836534165384913219904666514766167239599167127989872674773573046578127601178553281816793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3ed8f2982c5b4b159c3d6da94b8277cbefb0965
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalis-shop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalisshop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitalis-shop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitalisshop.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e16fa217e00000403004630440220510a898e72aa1e2668ec084a76f80ff71b41538241da9a1f7fea348883eef28d02202c2890279bca3bc2e9150a7a78e2c9df361b376bbd87a3879487fd01999fea360075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e16fa2380000004030046304402201100741d3c7b31d82a2df8bbbcdcc84d2fb3a74e0108cc050812cdf168f8971302201cb09a131a30290eb46955de0812c014e3eeb734ec58fe5ae690e34a53749a9b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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