paixon.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:25:85:c8:b8:be:7a:ec:81:36:ac:87:b0:d5:8e:00:cc:1e was issued on by Let's Encrypt.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=paixon.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:25:85:c8:b8:be:7a:ec:81:36:ac:87:b0:d5:8e:00:cc:1e
Serial Number (int): 274105134901221324902141519290685966044190
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:05:80:1b:4f:fd:b4:4d:ae:df:f3:e0:1b:10:e8:ff:e6:61:1d:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 96:ae:b1:94:18:8d:e7:65:d6:5b:e6:a5:cb:ac:21:3d:d1:e6:3b:55
Fingerprint (sha256): da:cb:f9:e0:39:16:ad:04:80:52:90:4f:71:21:46:0e:6e:e5:d6:d8:a1:2c:da:c2:7d:61:fe:a3:b7:61:aa:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate paixon.ch

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paixon.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.noora.ch
bls.paixon.ch
bot.bls.paixon.ch
bot.chatbot.paixon.ch
bot.demo.paixon.ch
bot.faceyou.paixon.ch
bot.noora.ch
bot.ohnesenf.paixon.ch
bot.rethink.paixon.ch
ceruno.paixon.ch
chatbot.paixon.ch
demo.paixon.ch
dev.bls.paixon.ch
dev.bot.bls.paixon.ch
dev.bot.chatbot.paixon.ch
dev.bot.faceyou.paixon.ch
dev.bot.noora.ch
dev.bot.ohnesenf.paixon.ch
dev.bot.rethink.paixon.ch
dev.chatbot.paixon.ch
dev.faceyou.paixon.ch
dev.noora.ch
dev.ohnesenf.paixon.ch
faceyou.paixon.ch
moritz.paixon.ch
noora.at
noora.ch
noora.de
ohnesenf.paixon.ch
paixon.at
paixon.ch
paixon.eu
portal.paixon.ch
progressive.paixon.ch
sellit.paixon.ch
spafinder.ch

Other certificates including the domain name paixon.ch

(limited to 100 certificates)
bkb.paixon.ch
*.paixon.ch
bkb.paixon.ch
bkb.paixon.ch
bkb.paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
*.paixon.ch
paixon.ch
paixon.ch
paixon.ch
bkb.paixon.ch
paixon.ch
paixon.ch
paixon.ch
*.paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
bkb.paixon.ch
bls.paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
bkb.paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
paixon.ch
bls.paixon.ch
*.paixon.ch
bkb.paixon.ch
bkb.paixon.ch
bls.paixon.ch
*.paixon.ch
bls.paixon.ch
*.paixon.ch
paixon.ch

Certificate

The complete raw certificate details for paixon.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH6DCCBtCgAwIBAgISAyWFyLi+euyBNqyHsNWOAMweMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMDcwODM4MDBaFw0x
OTA1MDgwODM4MDBaMBQxEjAQBgNVBAMTCXBhaXhvbi5jaDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL1FG8wlVtoaa/2p8oDhDfnzMicrucf9DC9cpXuc
YSvfAfgZi/2szNTu2+5VOj/8dBtWDcxWY/3RWa14Uw4xiswi8N3yfFDF57iOfPyW
/beLQoM2rL5NQi3cr309s5/jDdoHWuzYVMj6hGpJQ12uvbIKelLI/JNLrmoLPLpc
8ZrsS9ADLMb8kXniupan5sQdlF7ssAVUKZnusUaMLRyf0jGo2+EAjPUSANmNz1A3
yS4QbqN62LFTg7Yltz01e3ZaTb3DtW+tIPGO+DExNA0M37uNjIN8uLiSPXCBA+4n
g1+fMUYk0L9o7wNMIjekET+UvK41Mo3QWmJ1vu624M7kW50CAwEAAaOCBPwwggT4
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU0AWAG0/9tE2u3/PgGxDo/+ZhHZ4wHwYD
VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4G
CCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8G
CCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCC
ArEGA1UdEQSCAqgwggKkgg5hZG1pbi5ub29yYS5jaIINYmxzLnBhaXhvbi5jaIIR
Ym90LmJscy5wYWl4b24uY2iCFWJvdC5jaGF0Ym90LnBhaXhvbi5jaIISYm90LmRl
bW8ucGFpeG9uLmNoghVib3QuZmFjZXlvdS5wYWl4b24uY2iCDGJvdC5ub29yYS5j
aIIWYm90Lm9obmVzZW5mLnBhaXhvbi5jaIIVYm90LnJldGhpbmsucGFpeG9uLmNo
ghBjZXJ1bm8ucGFpeG9uLmNoghFjaGF0Ym90LnBhaXhvbi5jaIIOZGVtby5wYWl4
b24uY2iCEWRldi5ibHMucGFpeG9uLmNoghVkZXYuYm90LmJscy5wYWl4b24uY2iC
GWRldi5ib3QuY2hhdGJvdC5wYWl4b24uY2iCGWRldi5ib3QuZmFjZXlvdS5wYWl4
b24uY2iCEGRldi5ib3Qubm9vcmEuY2iCGmRldi5ib3Qub2huZXNlbmYucGFpeG9u
LmNoghlkZXYuYm90LnJldGhpbmsucGFpeG9uLmNoghVkZXYuY2hhdGJvdC5wYWl4
b24uY2iCFWRldi5mYWNleW91LnBhaXhvbi5jaIIMZGV2Lm5vb3JhLmNoghZkZXYu
b2huZXNlbmYucGFpeG9uLmNoghFmYWNleW91LnBhaXhvbi5jaIIQbW9yaXR6LnBh
aXhvbi5jaIIIbm9vcmEuYXSCCG5vb3JhLmNogghub29yYS5kZYISb2huZXNlbmYu
cGFpeG9uLmNogglwYWl4b24uYXSCCXBhaXhvbi5jaIIJcGFpeG9uLmV1ghBwb3J0
YWwucGFpeG9uLmNoghVwcm9ncmVzc2l2ZS5wYWl4b24uY2iCEHNlbGxpdC5wYWl4
b24uY2iCDHNwYWZpbmRlci5jaDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE
AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y
ZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4
cCUIFy+jqh0HE9MMAAABaMdSNxsAAAQDAEcwRQIhAITVxkkLI1i6GMwpir6QTzoL
HG4Mp6XHW6xr76xRrJBhAiB0+mct0SvLSQsknTux7UvvyVIqrKWYC4pKGErFu4l/
LgB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABaMdSNcAAAAQD
AEYwRAIgQP6m/azEpSm2Z4R2nty5SpZqPIlHKp3HvqludlGzTP8CIGwnu3ss61QB
XP4cyDsrHN8H8lTmS8JUTBegud7KoZyyMA0GCSqGSIb3DQEBCwUAA4IBAQBpO1kc
5BftZKiGJIe7HPE7scFMRrDDZ4r7KW8P4JndqzCc/uBvzeD3K393f6KaEy+JQQDY
JuFd7DPn309BOgDuz/oJFeFjdk3YAmHbkASLheT6SfPdClDQ5dwTXu/Kl6eUDn+Q
6Bi/NyUxMdDLqG9eQ1vaawdBe1wJKpFVJ8bWf0IlT60Vzhh8Rkt7XrkY4HZW7/fR
kYy8LpPzTLY3ufwTbaH3SuusRjka35LXneSVWg4AwRTMzn0e/nqM9JVTgD83OJkz
VuQD+5aaBhAMOKluoVG91sIOyB7/MEcCKb+EUc/MW/Y70X3+eYMgZBWHxOKFTm9m
FtsaCNVwkz5zw4UF
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUUbzCVW2hpr/anygOEN
+fMyJyu5x/0ML1yle5xhK98B+BmL/azM1O7b7lU6P/x0G1YNzFZj/dFZrXhTDjGK
zCLw3fJ8UMXnuI58/Jb9t4tCgzasvk1CLdyvfT2zn+MN2gda7NhUyPqEaklDXa69
sgp6Usj8k0uuags8ulzxmuxL0AMsxvyReeK6lqfmxB2UXuywBVQpme6xRowtHJ/S
Majb4QCM9RIA2Y3PUDfJLhBuo3rYsVODtiW3PTV7dlpNvcO1b60g8Y74MTE0DQzf
u42Mg3y4uJI9cIED7ieDX58xRiTQv2jvA0wiN6QRP5S8rjUyjdBaYnW+7rbgzuRb
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274105134901221324902141519290685966044190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-07 08:38:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-08 08:38:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paixon.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23893118351372377225306750224562546785862751887128845815317287033271144381357150046000727912976148846930375112950887479213417532121760361138960369329866119400094261186761524900046674404022801774802067613783965498319564644707867072157000347731039376987064069869697708799357548100147816553961693208571771120745082702501813142521008018139440037074749606148678038447381783185600686040203731541863312375271580518479343902180519124152160728187713434399228303755711223807541883650900715480504186586025678935442632165983440652221980360397508325506660756826121654703076441406157752894965885135055957529523275472960988842843037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d005801b4ffdb44daedff3e01b10e8ffe6611d9e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (680 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.noora.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bls.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.bls.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.chatbot.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.demo.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.faceyou.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.noora.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.ohnesenf.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.rethink.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceruno.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbot.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bls.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.bls.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.chatbot.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.faceyou.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.noora.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.ohnesenf.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bot.rethink.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.chatbot.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.faceyou.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.noora.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ohnesenf.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceyou.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moritz.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noora.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noora.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noora.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohnesenf.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paixon.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paixon.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progressive.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellit.paixon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spafinder.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000168c752371b000004030047304502210084d5c6490b2358ba18cc298abe904f3a0b1c6e0ca7a5c75bac6befac51ac9061022074fa672dd12bcb490b249d3bb1ed4befc9522aaca5980b8a4a184ac5bb897f2e007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168c75235c00000040300463044022040fea6fdacc4a529b66784769edcb94a966a3c89472a9dc7bea96e7651b34cff02206c27bb7b2ceb54015cfe1cc83b2b1cdf07f254e64bc2544c17a0b9decaa19cb2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00693b591ce417ed64a8862487bb1cf13bb1c14c46b0c3678afb296f0fe099ddab309cfee06fcde0f72b7f777fa29a132f894100d826e15dec33e7df4f413a00eecffa0915e163764dd80261db90048b85e4fa49f3dd0a50d0e5dc135eefca97a7940e7f90e818bf37253131d0cba86f5e435bda6b07417b5c092a915527c6d67f42254fad15ce187c464b7b5eb918e07656eff7d1918cbc2e93f34cb637b9fc136da1f74aebac46391adf92d79de4955a0e00c114ccce7d1efe7a8cf49553803f3738993356e403fb969a06100c38a96ea151bdd6c20ec81eff30470229bf8451cfcc5bf63bd17dfe798320641587c4e2854e6f6616db1a08d570933e73c38505