brezelkoenig.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f9:b7:e2:45:ab:c5:d5:9c:c5:1e:04:46:42:3c:32:db:c9 was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brezelkoenig.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:b7:e2:45:ab:c5:d5:9c:c5:1e:04:46:42:3c:32:db:c9
Serial Number (int): 346311590754008591048401607058876097813449
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:c2:0c:d7:19:e0:74:41:09:37:6a:33:45:5c:89:77:e8:d2:35:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:62:1b:7d:50:d5:d3:7f:99:2c:4f:42:f2:bd:ef:7c:88:d9:73:92
Fingerprint (sha256): d3:e2:19:6f:98:e7:03:73:ee:cb:ba:a1:e5:b2:47:dd:b1:68:d8:75:ac:18:1a:07:42:8c:2e:73:db:04:11:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate brezelkoenig.ch

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brezelkoenig.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bretzel.ch
bretzelkoenig.ch
bretzelkoenig.de
brezelkoenig.ch
brezelkoenig.com
pretzel-king.us
pretzelking.us
swissbretzel.ch
swissbrezel.ch
swisspretzel.ch
swissprezel.ch
www.bretzel.ch
www.bretzelkoenig.ch
www.bretzelkoenig.de
www.brezelkoenig.ch
www.brezelkoenig.com
www.pretzel-king.us
www.pretzelking.us
www.swissbretzel.ch
www.swissbrezel.ch
www.swisspretzel.ch
www.swissprezel.ch
www.xn--bretzelknig-yfb.ch
www.xn--brezelknig-kcb.com
xn--bretzelknig-yfb.ch
xn--brezelknig-kcb.com

Other certificates including the domain name brezelkoenig.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for brezelkoenig.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw80X5mwuVNArj1ffxhAN
ucew0K87rGd51XCr+1iMSszNiIpBdDqY653rm7iimALIvPiDnXzXBlY3j4hLSfVD
q7ROLyQdwLoBQrWf5Jw+0coduVaENSfXv7lz0LBnuVMDR0r5TDvXHylgiav+IESq
1CYZN1yVPNPeYSdyeKob/CzFk/UnuRNg8AmVPXsw4vCTKUzfu9sxLsxnIf33rW9S
oJzAFOUNtqax9ZZZlKj15hOTgzOReeYHjdhSehrKrhGJOjKUnPpFhmBXxFTuQjkr
eyJadK60ae8NoeIF3OduOLM44pp3Jr+/QHKncjtyKn6/Fmupiij63CXOQIWD5sYc
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346311590754008591048401607058876097813449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 14:20:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 14:20:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brezelkoenig.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24717604773423591751631322411117153757702924424172853590246067323191980746017329739900436398538927325076202588738589508606083693873116221842717365658123122015656572215308300955768439534217631609109770066511031268971356327167724168995490883005229032885087057374766881872905129652089177416815952843515679925496213231019199008967625990553839106844687262464374722955385353703050636662234699252386276160042629616871953581290510801841198207208270002545960316433672535188220159864436635568372582328996552203410492639994645020495887075605023139144229421430157877706576787436475702595183986719367523189928739980094473446497423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ec20cd719e0744109376a33455c8977e8d23542
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (516 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bretzelkoenig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelkoenig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pretzel-king.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pretzelking.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissbretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissbrezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisspretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissprezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bretzelkoenig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brezelkoenig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pretzel-king.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pretzelking.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissbretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissbrezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swisspretzel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissprezel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bretzelknig-yfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--brezelknig-kcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bretzelknig-yfb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brezelknig-kcb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e843fe061000004030046304402200681da9993a981d6324490bb65b3c371dc4c593cff5f72b4839dea6c6cb3aab30220738337656a0b790edacb98062f3879abd082c49a532fa5174f9f56fd09e3e94a007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e843fe0570000040300463044022033e3b3755b7fbbec18e81080cdfad1da066c1abb54409385ce4206cb5f9a962b02206d0e622eec31365b3cbb6dc2856d34c643c6bec01ee96d37c9bd1d7fa082e4bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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