markusko.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:38:eb:65:dd:fb:77:32:3b:65:84:f4:28:27:d2:51:85:08 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=markusko.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:38:eb:65:dd:fb:77:32:3b:65:84:f4:28:27:d2:51:85:08
Serial Number (int): 367817853777941388429219009455776404178184
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:15:fc:2d:46:c3:9b:6c:d1:1f:df:96:a8:fa:09:02:08:94:56:b0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:b1:31:49:82:ee:aa:bd:99:69:8e:3d:e9:57:85:df:8e:3f:90:ae
Fingerprint (sha256): c8:73:a2:7d:19:4b:b8:48:05:d3:df:75:58:4a:d6:8f:05:fe:2b:cc:88:58:e5:3d:95:8f:5b:26:b3:08:6c:12

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate markusko.ch

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for markusko.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gallry.markusko.ch
markusko.ch
pastr.markusko.ch
pi.markusko.ch
q.markusko.ch
sesame.markusko.ch
stalkme.markusko.ch
www.markusko.ch

Other certificates including the domain name markusko.ch

(limited to 100 certificates)
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
stats.moin-alex.de
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
docker.markusko.ch
markusko.ch
markusko.ch
markusko.ch
markusko.ch
docker.markusko.ch

Certificate

The complete raw certificate details for markusko.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuT0Ll10uBfPRAtkppwG5
tNv+pmn2hdxiRZw5hSBuonfwy7wxEgoFhNXc65ZokHnZk7bi5SEFwvqN/zoQyv5U
rY9d40+/ksdVnj5ZsrExsqPaA+dxIECvtduf81oSGuXZsJXITdc/6+o5USKDb7cq
+r3KpTd52g8vaD+Jd03bZO87SYzeSNR57tT60F6NymWn2Nm171yoSplSX0aFU/65
kglLRDNc/DnzYqntka1P3ptaON0Q9Ce3/U8gv9HExlNo83lZzKcK/cZY4cW208j4
sw9AnjST1LUrWslHm1MN7fK6Kq5ZZ7g5CoAf+Ei9fi+iUpcDmznlXGyQf+ZEI5sc
6MESktcKHfWiXJg1C0u4xCQy1nZF/dv85mma2cICsB7sRf9EZkAsmbuIW2n5zUc6
Tp9dA1EOI3TBIq1ag8TpqhDm3J0vtq/JzzR6BArVx8Z8qWNA8sOY1XGkB5bG73HU
tzXRlDyATTAwLbfvCpxVXHH0bzyzGMEVYO6lFc874viasdrlRVjki7tnBc6QohaN
+6nhF9sHLsE27A8+ulduKhjRlwkwrwon1LoHDLYrtCpTD9aVIqMYnz2UFiNiplrs
SubgwA0/kUHG5bDa4i1tOxEbi/JPwgplJBVmthJZlwRT+qMvl3dVaJVHa9aFyIri
Ta5JuKJJO0axDM9AzQ5nj1cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367817853777941388429219009455776404178184
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-30 16:51:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-29 16:51:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'markusko.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755706976833051911860781786951219240319454639067803392139014257708427261974650140320395377804536402975520280463470482312236960483912563077501118510808872940619939622302429544057306977341913829390972935402814314426027244577283568834449865456036171371786902448568751142831735833520952416903321088869754273700611155506396387870978877765011834775455277572621925151689902916294592975398536134268024223505474984669156315821312042098687383388164745602072317831027065560094430363858468957743850756261363357500861140482233908170211112582349786445233234741657084347560562537926231304597998642747117909517433739297095159651010909612486941838141100981259101247307029658663910909932424143138629091869429043350924440109208320960021700357161183613068356945752778005594993245115207245006914582630756272226070569185899267450536510546949599562545928420392839553783888291673680802057611532083450576851540622603020419522070121469036095201509621493324253654105967022720852478488396887980369129494457402024404875414036389277161649799196600144079734688606582444308229342391864614919002319110190750992787047619205856516313892953298212482260962552820141846119955139837548837875200356964461490593962134314573008359726282179157504650228397333546425915529465687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d215fc2d46c39b6cd11fdf96a8fa0902089456b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (144 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallry.markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastr.markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pi.markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q.markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesame.markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stalkme.markusko.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markusko.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f57ef1b9c000004030047304502206a8ca93b29ea5949d99afae6fae8ce1ff42589439c99d4e3960348bd5bd812c6022100d2cbbb22a1e9eb403e8b7b51dbd8defe5a6a74c499342d1a1f77f8897781fc390076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f57ef1bd00000040300473045022100a5d284f9b4bac7a19c3a5f58d63351a2d1666fe2ff2e45925757fdbf41ebc8dd022069d8bd78b8d49ed613ae26b011a9bae928559c5977d39895a0360c42911b89b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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