dihosting.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:50:34:58:78:e4:94:54:ad:47:78:1b:12:c1:0c:32:ac:76 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dihosting.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:50:34:58:78:e4:94:54:ad:47:78:1b:12:c1:0c:32:ac:76Serial Number (int): 288629026378859263348126877194382375824502
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e7:0e:c9:4f:52:32:49:04:97:94:5a:19:88:c0:b5:cc:b6:9a:b6:cd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ec:9b:1e:b9:b1:66:41:99:02:b5:f7:ce:70:98:6d:4a:38:95:20:b5
Fingerprint (sha256): d7:f9:ab:19:16:10:59:79:91:11:2c:21:dc:53:ef:9f:69:35:42:2e:56:39:54:83:bf:11:cb:b2:d7:df:e9:ff
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate dihosting.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dihosting.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dihosting.ch
Other certificates including the domain name dihosting.ch
(limited to 100 certificates)
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
nas-001.dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
nas-001.dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
dihosting.ch
Certificate
The complete raw certificate details for dihosting.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgISA1A0WHjklFStR3gbEsEMMqx2MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEwMjYwMzM2MDNaFw0x ODAxMjQwMzM2MDNaMBcxFTATBgNVBAMTDGRpaG9zdGluZy5jaDCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAOKoFxwZurMuRXD9mOgv9TJ1L79CRBYutGLX st0iZAi0B5AgbeskRiuvwXnmIt2G5aVIjpjNosVqRuxgh7LqoLufVt5k9mKtg4xp 3Qfxd6+Y0ZFTJezi1Wmm5nuMqiVGUNX1m1IfMa+IDJLDdXIM9ggVFUwefCUGD1uq y4gbuVFf3OIRDcxqoN8ESNVr8dvFlgegChTQQ8wYboNZfLLKI7ZbZXzvaoqXTE4b MfVbO2kCiehuDHVl6RvzODmsjZ+aVEytvLo0jHYRZCbA2OkoqHzmYKHt/f0/HcgI SptklsbZQsdKoI9gvomG+s/wCYOIAzE4W707W4C0xqfS3uXx0OKO5VdoXa3pJtLB Cmv89yv6h24NH/UseGFTrPd2C5+Jd6OVTSGaKLj+pAxonPI5vvgzlt70Fu7pfRcS GcbYqcLQj6Dw/269aaj48wr2f8b4ea4XO3RFcpjmGuTW2maOtn1Dk62EiM6rNf1O Xw9EEw1/9vaYmdrlKQZeSsVHQv/ARNFSO7Y7dR4VvKOWE6XHdT4Ag47suBClQWGP 2fPItv0NeBMX3o2pBiGm2asSBAg9aRFhKGYiR5sNs88v0iwkK0LQw8eZzqSgkdXb HUXl6NgyWkbWyR0sJqlBPlxJaxdSZNeyjXd7yNfBAbQfmqoXEP8fyQUOy6ubAnEv wDZZCcKJAgMBAAGjggIMMIICCDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOcOyU9S MkkEl5RaGYjAtcy2mrbNMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMZGlob3N0aW5nLmNoMIH+BgNV HSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcC ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGb VGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5 aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0 aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcv cmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAFe4A5MOhknAOAbFkiG0H5C9 MnE0etKVtd6vJyaV+vTOID3d3IOconyQtj1vJEKNAwy5AgPU8GuF3wIXJYc54NZE kOhxYVDZL5TX3SlhM1IlRpIwpgPlDs5anp4aeG5/DB9yxzmvXKH/idjq5L7ByRAc j2r/CrPorQgsEaWBmjAb1CZ3Jzi1KW74lZTJpMd3LxQoWe4x2VFV1AIY31S+2fFE TCFEoZeXESbVY21t+qs/jwvobdrfJTvwYBfsYGhAlr2AOtMp80fz3p4zhxIK5Edy OriwalLrMvBPnxfg2s9WHTLNZyVHxBNVYGNm+lpUq0KCbdhMhAusnVYiguKhrm4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4qgXHBm6sy5FcP2Y6C/1 MnUvv0JEFi60Ytey3SJkCLQHkCBt6yRGK6/BeeYi3YblpUiOmM2ixWpG7GCHsuqg u59W3mT2Yq2DjGndB/F3r5jRkVMl7OLVaabme4yqJUZQ1fWbUh8xr4gMksN1cgz2 CBUVTB58JQYPW6rLiBu5UV/c4hENzGqg3wRI1Wvx28WWB6AKFNBDzBhug1l8ssoj tltlfO9qipdMThsx9Vs7aQKJ6G4MdWXpG/M4OayNn5pUTK28ujSMdhFkJsDY6Sio fOZgoe39/T8dyAhKm2SWxtlCx0qgj2C+iYb6z/AJg4gDMThbvTtbgLTGp9Le5fHQ 4o7lV2hdrekm0sEKa/z3K/qHbg0f9Sx4YVOs93YLn4l3o5VNIZoouP6kDGic8jm+ +DOW3vQW7ul9FxIZxtipwtCPoPD/br1pqPjzCvZ/xvh5rhc7dEVymOYa5NbaZo62 fUOTrYSIzqs1/U5fD0QTDX/29piZ2uUpBl5KxUdC/8BE0VI7tjt1HhW8o5YTpcd1 PgCDjuy4EKVBYY/Z88i2/Q14ExfejakGIabZqxIECD1pEWEoZiJHmw2zzy/SLCQr QtDDx5nOpKCR1dsdReXo2DJaRtbJHSwmqUE+XElrF1Jk17KNd3vI18EBtB+aqhcQ /x/JBQ7Lq5sCcS/ANlkJwokCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 288629026378859263348126877194382375824502 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-26 03:36:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-24 03:36:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dihosting.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 924678264385117419167043747310078662071822937320500580880591931196507548884565029795482845348182676687796873763842544989700453159601572099570236240583320703756398852065137892456569737386556973540647819312194238800227389293550125043641475378106463810223027246517124391210645796890616669840516143416036721228446484009893941887906325274217265627893363694569163688036542666866963844415570701832993968928220203066684012638330792907741331283262206539708357441247884567084216963018660240616743223276469700077151203523821710145399867734362554131378129567330177439247625399201175326084525923532369195600121325655493653587230409078655909541108197863579301345081955826139642624493789894252149643196826047170240932640626998906760843339397888959429394246774432408754997822531533749736000615529147070290095725858753480935065134164547460057153482737389817699710335113537778161502231966516064522195558611155245659252897248892140511347675726555427291969846404749744505436405692229962758626781766781808150776517896711280250899265909872049612800814525602285844434988088139111003337794904115945262092018446713510617333136399656271168937842084893213207458445028760544960670956106209496252847362806997516984788558254209576161095554328804507112065609613961 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e70ec94f5232490497945a1988c0b5ccb69ab6cd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dihosting.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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