energiekartenrainbowspirit.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:26:29:aa:19:08:2c:46:ca:7a:b9:d8:71:35:03:3e:18:12 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=energiekartenrainbowspirit.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:26:29:aa:19:08:2c:46:ca:7a:b9:d8:71:35:03:3e:18:12
Serial Number (int): 274322969284277302335793151264973779769362
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:ff:c5:64:53:9a:7c:df:8e:39:12:c7:63:df:4c:b3:79:93:52:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2d:d3:37:d9:41:7a:e8:81:08:82:51:04:e4:91:93:c8:f1:76:7c:ca
Fingerprint (sha256): d9:94:5e:70:b3:e0:b7:22:49:94:9a:78:b9:71:30:da:5d:d9:f0:64:b8:5f:82:d1:dd:be:d5:fb:6f:00:57:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate energiekartenrainbowspirit.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for energiekartenrainbowspirit.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

energiekartenrainbowspirit.ch
www.energiekartenrainbowspirit.ch

Other certificates including the domain name energiekartenrainbowspirit.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for energiekartenrainbowspirit.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApA6qAGXdnuaWcba4DKFz
fudwxy55KlsCzkdjPQzx6clURlpVC+WT4jHjLlgeJODdU/7IBBR939Gaf9ZsXs/J
BRaPXQxHMN7GX1vbQsOpHMS6ntzJ6n6PH3MzLrrvvXKu4MommMOmIZjzIv13lsHt
v+d5Iebvz+X4CZoHak5bDJ9S8j8K8qCa3l/Vn9XTbxVcOIDmifhPVTWsyfQOcnwp
d0YoT5Wqz36UjK4Q1RDJvDQgxKni2o9rOPMRpue4Jq6xqS8Jzqg0ysyn0goQqrDw
DfK+vcZ+lKOjgLkDtLLg7p/Owqxhtceyq6inMKtZdhLeo367MwtO57S2gXHz8+dI
BVvvYBM1aPhb0m2AFH4TIu5ofedULqCDupdCkalogLVUDYALH12i4Z69gjKk5OAu
1a1UJVTHOQjgtUASZUQg9BVCYHSPN9IdRIxZJiJs1tyBudR+EInZ5lixbkux0Omd
+IpC40yk2/KY7XlNVU62z0vzY6tnxsRfysrCGGhG7oZsQNUN4okvy5WSadZaJk+H
sRtg1Ko0Voln5ZW6Q1O4vZTH34McW1WKkaHm8r/0IzpCv3EimWZlkjGVS8lXPx3a
HN2c8J4UBdBAkzWyYhtw7mRZhezSvL5mOMjz1JFKoipmuU5p+VHj/65PL8HUViAz
hfXOudw2UcHsSF+rwA30YAcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274322969284277302335793151264973779769362
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 03:34:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 03:33:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'energiekartenrainbowspirit.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 669295315359837741337293285772420969594323550289799982979804020521947822193197928298780186346842521277997942991046408025500236755022871787527440659787701419438480539184227787404451353388532069882695594969968693843265810362447566270986900282666416727700123649493081855425609557620005309330727643182853854897247175736315340871394295877955640235588963200654022143134981017817370672765925570600426391960257578660266393937054444417989822644014755724901614995190537688030046139987962388238817772038169841843315595994330500388731996307083953524137071466230735645350318746524709534203104014448396707600751218014484062671152113500355890614347688084424181293384661389737014703737207312988662297805574668626253076852916542341071978158802104588744081181787185952337122194262599426079016509605244631596572654669940767619498888865643084336003436948931610956449603039827762360679740317426255603307113429187165252973761795634281965904850983112951816460331104681924453402878925448181828382606194315893687033263083215432375615866922266021258197642391887947461831312633064483404825074822359391979112275439304202270477559723858209813184386572450050976237151577799156549277678995345184638866413192690487340061837465263145484535196470403440971188752637959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3effc564539a7cdf8e3912c763df4cb3799352b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiekartenrainbowspirit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energiekartenrainbowspirit.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018caeb360610000040300483046022100c6728537a939d9bb455b4778c41cf3393e51c45389bbfa5e189e333150d54fd0022100d81969ef991dc3d457535fad2fbc7d0ca04ff051811e6b36bcdccf6771326f1300750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018caeb3612d00000403004630440220577c836e187b2d519c67be427f10d85745637738972aa97f8c93940ecb6a1f32022008a15e08ee1a3a8d4bc8600b466dd45905f9b3159634be0c308adf2308bd98bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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