kkobs.ecmt.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f4:69:90:41:85:79:84:cb:a2:e6:53:1d:46:9c:6f:3f:03 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kkobs.ecmt.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f4:69:90:41:85:79:84:cb:a2:e6:53:1d:46:9c:6f:3f:03
Serial Number (int): 431618359214986594931190081900882200313603
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b7:b7:18:b0:6f:e5:e5:4e:c0:6f:7b:38:3e:a0:4a:dc:ce:52:93:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:6c:d6:fb:a5:8a:20:0f:cd:bd:62:f0:84:24:77:7d:2a:e8:4c:1f
Fingerprint (sha256): c9:9b:27:e3:67:49:03:b5:31:0e:91:67:cd:89:87:0a:9b:97:71:35:ad:e2:70:85:2b:49:68:28:d2:39:66:fa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kkobs.ecmt.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kkobs.ecmt.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kkobs.ecmt.ch
kkobs.msapp.ch

Other certificates including the domain name ecmt.ch

(limited to 100 certificates)
kkobs.ecmt.ch
custodio.ecmt.ch
demo-v3.ecmt.ch
v3.ecmt.ch
custodio.ecmt.ch
www.ecmt.ch
www.ecmt.ch
mobilepush.ecmt.ch
v3.ecmt.ch
ecmt.ch
demo-v3.ecmt.ch
ecmt.ch
update.ecmt.ch
kkobs.ecmt.ch
custodio.ecmt.ch
custodio.ecmt.ch
ecmt.ch
*.ecmt.ch
demo-v3.ecmt.ch
ecmt.ch
kfstg.ecmt.ch
custodio.ecmt.ch
ecmt.ch
custodio.ecmt.ch
demo-v3.ecmt.ch
demo-v3.ecmt.ch
custodio.ecmt.ch
ecmt.ch
www.ecmt.ch
demo-v3.ecmt.ch
ecmt.ch
ecmt.ch
kkobs.ecmt.ch
kkobs.ecmt.ch
kkobs.ecmt.ch
kfstg.ecmt.ch
demo-v3.ecmt.ch
www.ecmt.ch
demo-v3.ecmt.ch
ecmt.ch
ecmt.ch
ecmt.ch
ecmt.ch
custodio.ecmt.ch
www.ecmt.ch
custodio.ecmt.ch
kfstg.ecmt.ch
custodio.ecmt.ch
www.ecmt.ch
ecmt.ch
kkobs.ecmt.ch
demo-v3.ecmt.ch
www.ecmt.ch
kkobs.ecmt.ch
www.ecmt.ch
*.ecmt.ch
kkobs.ecmt.ch
www.ecmt.ch
kkobs.ecmt.ch
custodio.ecmt.ch
kkobs.ecmt.ch
www.ecmt.ch
demo-v3.ecmt.ch
custodio.ecmt.ch
www.ecmt.ch
ecmt.ch
custodio.ecmt.ch
kkobs.ecmt.ch
kkobs.ecmt.ch
www.ecmt.ch
demo-v3.ecmt.ch
demo-v3.ecmt.ch
ecmt.ch
demo-v3.ecmt.ch
www.ecmt.ch
kkobs.ecmt.ch
kkobs.ecmt.ch
ecmt.ch
demo-v3.ecmt.ch
kkobs.ecmt.ch
ecmt.ch
demo-v3.ecmt.ch
custodio.ecmt.ch
kkobs.ecmt.ch
kkobs.ecmt.ch
ecmt.ch
www.ecmt.ch
kkobs.ecmt.ch
kkobs.ecmt.ch
custodio.ecmt.ch
custodio.ecmt.ch
demo-v3.ecmt.ch
kkobs.ecmt.ch
custodio.ecmt.ch
ecmt.ch
demo-v3.ecmt.ch
demo-v3.ecmt.ch
kfstg.ecmt.ch
*.ecmt.ch
custodio.ecmt.ch

Certificate

The complete raw certificate details for kkobs.ecmt.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMk1d1BAtb4v+lr2Rr8q
fWkPPJIg62c7y9mbw3aL1dLoIhl6oeSMkZiDSZJhLAO9AlKf7DMLrox0SRZkn7ll
zKpvhkeY7Q15Nxu4yhV5nAuft6kf/wvZAWnL6czg2MMfCciukVEMiRw7oHRkeJiN
BSNX7oSPR1fJZq8GfdsoKdcdHqMPEA4fUeCQrYPqj2DoEbOLJPFDhETcRSCZAtkU
SaPfUR/jHL2wAKVnmOEORTJ8QRo32qI3YMm0qmYJz/Mqu+ACahhViIIoybDeIIlD
UKQxfQ7kXwf+KPO2E0gsYzz5Bemsx8tUeyR4AqlYwUPm24Bnw2N0ftNtiNdnndPX
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431618359214986594931190081900882200313603
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-24 09:30:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-24 09:30:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kkobs.ecmt.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24841927556156483246755044503005659836126626423271751162707234955177102123126558117213962302833941599411207888709822170104947356048163456971188708481153377075726240203557777356636064080888510511850502055580651538409795289772728518985679529018763503463951483654536185018431446776811557986541179629216802047806072482292590545142172130709968752979446178208320467291746722713380419059453559629386134804206102225309933369604794982043694169071962640668823637381560855747094063840614547725918642596587814326416260577464507675074651447634166604805560127279626012581063132041846134982287084846547419313760460487652775512233797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7b718b06fe5e54ec06f7b383ea04adcce5293ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkobs.ecmt.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkobs.msapp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167dfc4471200000403004730450220738ac61b4643c35e84241bf2876b24f9a8652a776aec063980982ef179437c1702210099db37d3a901ed0c94474df8033804db434d68ea6c10d545bccdd6e9a74287f4007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167dfc447090000040300473045022100ae3c2f4cf8a539a0be7639a9f0eb4fb644f54a145155910dea6ab354d2813d2a0220500c9fa32aa431b0a66f2e05e4ca4299889e49318dd432d188553a489dc48871
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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