paixon.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:39:a4:6c:ac:e4:75:d4:96:d6:74:a6:aa:b1:8f:60:38:b9 was issued on by Let's Encrypt.

With 32 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=paixon.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:a4:6c:ac:e4:75:d4:96:d6:74:a6:aa:b1:8f:60:38:b9
Serial Number (int): 280951510375818619953897575603034136787129
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:69:d5:62:cf:c8:f3:50:bd:93:5e:e8:20:4f:e3:7c:67:cc:13:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2d:e7:24:9d:61:44:61:e7:db:88:46:d7:5d:70:12:ad:25:c1:73:65
Fingerprint (sha256): da:b1:23:b8:f6:cf:30:ce:b6:05:49:6a:28:87:c0:61:41:5e:ee:34:ab:07:2b:fb:24:b9:c9:1b:c6:2a:44:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate paixon.ch

32

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paixon.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.noora.ch
bot.chatbot.paixon.ch
bot.demo.paixon.ch
bot.faceyou.paixon.ch
bot.noora.ch
bot.ohnesenf.paixon.ch
bot.rethink.paixon.ch
ceruno.paixon.ch
chatbot.paixon.ch
demo.paixon.ch
dev.bot.chatbot.paixon.ch
dev.bot.faceyou.paixon.ch
dev.bot.noora.ch
dev.bot.ohnesenf.paixon.ch
dev.bot.rethink.paixon.ch
dev.chatbot.paixon.ch
dev.faceyou.paixon.ch
dev.noora.ch
dev.ohnesenf.paixon.ch
faceyou.paixon.ch
moritz.paixon.ch
noora.at
noora.ch
noora.de
ohnesenf.paixon.ch
paixon.at
paixon.ch
paixon.eu
portal.paixon.ch
progressive.paixon.ch
sellit.paixon.ch
spafinder.ch

Other certificates including the domain name paixon.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for paixon.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSA/nhxHrPSNEJAxKD3y
9QWCZYJsEarY0EO5OOXuXSsqJGRGzk5NHqYNMYLtGitBBO5mp9l1bjlhYfDpIXgy
6RxDE0R7kl+gCfhggNhOJQI7zKk/xb/Dtsk8TYr9aiqdrlrh51ag07H03Zq+u8XM
xnwvSs9f0imjtU65grDA8ro0QCGeIUtBIl99MQ/kje4lRjXd+ZPjbRkFr5huuaI+
jToctsC5Zct8wPBu6Orh8K7y718rx55n+pIFiEQ2oys4yL2CaSQZa8t46cn5OFv8
ny8I5T757Asbd181sjRkIoLdVs/O2ctJnRMYNxdNCPkfJO03k9AGHbwZgb7keOeT
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280951510375818619953897575603034136787129
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-10 08:08:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 08:08:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paixon.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23874941969741585926072164730071613187776613178253404071347930982772173922025148114898064317744791608656321718037687190622339457893963470212406081496622777275652851573802915347804726144183252125327234079539702881099851907101228630776667256549864416115491949325199518054740055159559856811158896690134918600325522573295249330213284471445045583008917435112508905293519266656471711276565259748321809438565863344193759206721055395821160410742710565686733878126530652786238985386039807631765897983358000750295362516997430947619683165166581098200994409205259016468451144998260293944132634384781505377550047091004857041523523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3269d562cfc8f350bd935ee8204fe37c67cc13d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.noora.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.chatbot.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.demo.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.faceyou.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.noora.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.ohnesenf.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.rethink.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceruno.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbot.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.chatbot.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.faceyou.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.noora.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.ohnesenf.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.rethink.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.chatbot.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.faceyou.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.noora.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ohnesenf.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceyou.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moritz.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noora.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noora.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noora.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohnesenf.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paixon.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paixon.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progressive.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellit.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spafinder.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aa100b1ba0000040300473045022034452d5b753d06590c6a36abcbb215e18735e0e2726db4cbe266cc0db48b29c3022100818e2c21037ce10b3b379d1754724c14b52dd500e4a57081431b39cbe90249ed007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aa100afe100000403004730450220699f2036ca15a541086a08c3ace65463e0b08db60b97de7862c5ab8bc42ee7b60221009f8ed6afc672a9fb98ddc0ed9c3503144b9bde74c992e82eef9a8b858242b1be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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