privatschuleolten.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5e:d4:91:da:68:6b:ba:e4:19:79:0b:af:37:2f:63:6a:39 was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=privatschuleolten.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:d4:91:da:68:6b:ba:e4:19:79:0b:af:37:2f:63:6a:39
Serial Number (int): 293605953933838208551461080352417500064313
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e6:d4:f9:5f:8e:87:9b:28:71:32:81:7d:55:6a:75:1e:57:99:86:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8d:6d:69:3e:65:c5:ac:88:8f:d9:55:c9:40:4e:ef:3b:7b:82:a8:25
Fingerprint (sha256): c9:e4:4d:41:d6:51:1d:8f:c2:15:35:82:1b:6e:a3:be:14:0b:00:86:3a:87:c9:b0:c8:05:4c:99:6b:45:de:f0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate privatschuleolten.ch

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for privatschuleolten.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akzolten.ch
autismusschuleolten.ch
informatikschuleolten.ch
interlink-olten.ch
interlinkolten.ch
privatschule-olten.ch
privatschuleinolten.ch
privatschulen-interlink-olten.ch
privatschulen-interlink.ch
privatschuleninterlink.ch
privatschuleninterlinkolten.ch
privatschuleolten.ch
spezaverhaltenolten.ch
www.akzolten.ch
www.autismusschuleolten.ch
www.informatikschuleolten.ch
www.interlink-olten.ch
www.interlinkolten.ch
www.privatschule-olten.ch
www.privatschuleinolten.ch
www.privatschulen-interlink-olten.ch
www.privatschulen-interlink.ch
www.privatschuleninterlink.ch
www.privatschuleninterlinkolten.ch
www.privatschuleolten.ch
www.spezaverhaltenolten.ch

Other certificates including the domain name privatschuleolten.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for privatschuleolten.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDfd1m7WXjvpQt/iRGxX
EG/NzLi+kCk7EG21LtzmWFN/960gwkc850Wi4I+d207Htlg2lilbu/+fbdXWyOSl
xAHLD3RbgFdpnvre3phoimESMQmxJ3C0XcSlxfkTLjqmzmwo4r2K788WqDEbwNWh
UITyHi17AfhOoDQQavx/Slf+dWOAFrjdLNb/WZ4QpIKXwbQyPIcOKL3ktm8iG6ci
kYKq1CO++D6+TTi3eWyHICIcBpCr+NnUyVO05yPxFddpnzo4XwQ5gzklIyUDfKm4
NVefhQ6sykBhvdyoPBCLJBCQOdfR4I5MOGlJJhQ/SHmCpN6FNzs60aKYa8YWIDx/
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293605953933838208551461080352417500064313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 21:04:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-28 21:04:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'privatschuleolten.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25780163037236000055378395009122345851460632189130711439054373077078813544508974487536909396272248733876928797249724936861413014911253684562895719579222003544555966595048606328166287718559728084217168556661356112330162808132356853592842591897960080983204754413287778593557354199917218926672126182780699495976277847337031529445869169686742322434191691600435008388698272303102162303109349744769566452808455302714577077287398261230206796442503611801565751039765770331027083129577529412781441956223364804381835014105730914756560958050017866698586545418278020975889572813038277891414791154571021844492210192057263923691283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6d4f95f8e879b287132817d556a751e57998655
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (688 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akzolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autismusschuleolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informatikschuleolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interlink-olten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interlinkolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatschule-olten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatschuleinolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatschulen-interlink-olten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatschulen-interlink.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatschuleninterlink.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatschuleninterlinkolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatschuleolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spezaverhaltenolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akzolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autismusschuleolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.informatikschuleolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interlink-olten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interlinkolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatschule-olten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatschuleinolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatschulen-interlink-olten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatschulen-interlink.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatschuleninterlink.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatschuleninterlinkolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatschuleolten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spezaverhaltenolten.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001708dd42016000004030046304402201d2ffb0627b2bb70a0c29ac4ea3214cd367e78429d66268bb297ad5301b4dec5022011accbc95871e9e9e1948cf5349a28d184838be6cbc52a670647427cd6f48f2d007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001708dd41ffe0000040300483046022100c85360b825776aade2bf9355bd7143a90ddd0d2e6b9003b7561316f507d99bda022100dcdda7b2d0c43a46759deac9ca59008bcc50ed7733891a47c11260f525e31ed8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003251bd9e8dcc33f44e877bdf5746892f0abc0f3b9f9c9533a07efdbf5a9ff07b0a1692fd4890fdbb495293c505456789fac77ce0dad67bae1a083ad1c6d34f81385ff60571a883d8c1a53d8f7484a1147c8e58e548e6905295d19420a401f86203c3f106d4b9632467689c7a54a071c30f7ba34bc049473eac1cb00292b2060e1ae9d64f7a7277b21473ae404fd1069fe09eff9a40642fe2c291fe04d167fc5e5ce8e07b7549196f6a290d986dbbae805262de4e7212c08bbc77b6b426097842c03da3e49d6ce5bf995b6bc37a3274661c46ec2f2525060de56e03eb840deb47469b2bab1b057682b8e607953cfb2add60d3ac09361a545112a5ae5a56ef376e