tcs.test.hach.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:0c:6e:5e:eb:fa:36:cf:1c:d8:78:bc:e0:0b:f6:aa:a5:4c was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tcs.test.hach.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:6e:5e:eb:fa:36:cf:1c:d8:78:bc:e0:0b:f6:aa:a5:4c
Serial Number (int): 265566954139963304582351799643198821410124
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 77:08:93:8d:55:ca:a5:90:6e:78:9e:97:91:5c:78:c8:2b:0d:33:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:dc:65:df:2b:93:d5:d7:0a:d6:96:85:e3:36:57:d3:55:3a:26:d8
Fingerprint (sha256): e1:94:4a:a1:75:d2:10:e4:19:7c:70:b0:78:c5:68:51:39:b2:29:d2:8d:e9:6d:25:4f:be:8c:26:30:6e:28:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tcs.test.hach.ch

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tcs.test.hach.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tcs.test.hach.ch
test-touringshop.ch
www.test-touringshop.ch

Other certificates including the domain name hach.ch

(limited to 100 certificates)
www.hach.ch
hach.ch
www.hach.ch
hach.promidata.shop
www.kellerfahnen.ch
hach.ch
hach.promidata.shop
hach.promidata.shop
hach.ch
hach.promidata.shop
test.hach.ch
tcs.test.hach.ch
test.hach.ch
hach.ch
www.kellerfahnen.ch
test.hach.ch
hach.ch
hach.ch
tcs.test.hach.ch
test.hach.ch
tcs.test.hach.ch
www.hach.ch
www.hach.ch
www.kellerfahnen.ch
hach.promidata.shop
hach.promidata.shop
hach.ch
hach.promidata.shop
www.hach.ch
hach.promidata.shop
tcs.test.hach.ch
hach.promidata.shop
www.kellerfahnen.ch
hach.promidata.shop
hach.ch
hach.ch
tcs.test.hach.ch
www.hach.ch
hach.promidata.shop
www.hach.ch
hach.promidata.shop
hach.promidata.shop

Certificate

The complete raw certificate details for tcs.test.hach.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAwxuXuv6Ns8c2Hi84Av2qqVMMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAyMTcwNjU1NTBaFw0yMzA1MTgwNjU1NDlaMBsxGTAXBgNVBAMT
EHRjcy50ZXN0LmhhY2guY2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFFgzWR+8e1/ZGVPTDcLwiwCTeOFgC41bSxI5a7dXy/k5L3QP5wzrykpzCptOm
Mc0YffQs2HaBl1ZirVKmjBqsg9OFVcCf4E7J0VgIrBJo1YQjLqTfeVngk4jOt+b2
AJzyOkMSIxNTnuA1SZRFjoNYEaurXRe8ZPYWC9BpiRePxnXXzteFvMUukKu94dF9
mB9QV2cmvsNuJN2XNNLUfl02/igdlEHKMHaq8+xueYcZI7yXLj0JQDeWWIie6lTk
0Gyhso5TftvDYmLhFCisqqYtHCbmbjrlmyb81c2tMXF1KrZUyipHOkPYlb0H6MpB
InF1fYSOwqB7JjuWjZcWF7AhAgMBAAGjggJ6MIICdjAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFHcIk41VyqWQbniel5FceMgrDTNrMB8GA1UdIwQYMBaAFBQusxe3WFbL
rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov
L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v
cmcvMEkGA1UdEQRCMECCEHRjcy50ZXN0LmhhY2guY2iCE3Rlc3QtdG91cmluZ3No
b3AuY2iCF3d3dy50ZXN0LXRvdXJpbmdzaG9wLmNoMEwGA1UdIARFMEMwCAYGZ4EM
AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAejKMVNi3LbYg
6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGGXl9S+AAABAMASDBGAiEA5DdLPoJc
yMsQjG3wH0I9QCMY9vixC1x8HFZPpUvWup8CIQDl4A3wtfIVlfvfOaUrYA27hh7I
in+z08igc1zyp/CWPwB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKK
AAABhl5fUv4AAAQDAEcwRQIgEeDYYGUfoMo84JQXp+jI38cq9yg5bgRbbW13WSHK
PsACIQCibw0ioLWN3vHJjOZV5roKMpO0HC/h1dp6ToBxCi5c1DANBgkqhkiG9w0B
AQsFAAOCAQEAQPxvJtwwd7BIJEBNV9TBtRJm9Bpx+5fp+sA0vOGE6+XaQgbcZO81
UIdGVwtjnf3e+9d9x7s13/lG4n+yve2F+q5+YDTkpSVbztG+EgLCYJhTPxechxU7
9pOkVVq25+9o+MgnLaDufW6xha/+wh/Ke3T7dAoZGd2RIkzmwxkFQNBwuWrxXuWF
0aXmF+jjrzZgwE7HzIK93qZ2UR55R4Y3R9tPml3kXLXfSNBm1ALxHYUlQlqd5XkO
tJ3nOwjiuuQdmdihwdZCdUbX2xxe1vsDBPrriXz7a0F5NPv41K6/Pnap1dX4dFQ5
Sf/FsOQeaSsPuRseWlhK30QPxiaYhoevlQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRYM1kfvHtf2RlT0w3C8
IsAk3jhYAuNW0sSOWu3V8v5OS90D+cM68pKcwqbTpjHNGH30LNh2gZdWYq1Spowa
rIPThVXAn+BOydFYCKwSaNWEIy6k33lZ4JOIzrfm9gCc8jpDEiMTU57gNUmURY6D
WBGrq10XvGT2FgvQaYkXj8Z1187XhbzFLpCrveHRfZgfUFdnJr7DbiTdlzTS1H5d
Nv4oHZRByjB2qvPsbnmHGSO8ly49CUA3lliInupU5NBsobKOU37bw2Ji4RQorKqm
LRwm5m465Zsm/NXNrTFxdSq2VMoqRzpD2JW9B+jKQSJxdX2EjsKgeyY7lo2XFhew
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265566954139963304582351799643198821410124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-17 06:55:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-18 06:55:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tcs.test.hach.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24879819409904186227257947420681858471135726754823585638108593818348110670432691280046356498389990422666993022883423917591088570060713029568255651932476140823244682367480341120377614345575845285246472518271243224867281879939081951711603167013885739717851522731610721857821821954937289083523427243685484798503687034878653060273909545755533366840107256607674882080844070959795134569495611927186312312053342805564784756131404659665396683237880892738680881114548245329769148698724999320461722790422721089129005717894289635129632731335996270758921782042874257623391643350574333242586889136317741503118910664046342445707297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7708938d55caa5906e789e97915c78c82b0d336b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcs.test.hach.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-touringshop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-touringshop.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001865e5f52f80000040300483046022100e4374b3e825cc8cb108c6df01f423d402318f6f8b10b5c7c1c564fa54bd6ba9f022100e5e00df0b5f21595fbdf39a52b600dbb861ec88a7fb3d3c8a0735cf2a7f0963f007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001865e5f52fe0000040300473045022011e0d860651fa0ca3ce09417a7e8c8dfc72af728396e045b6d6d775921ca3ec0022100a26f0d22a0b58ddef1c98ce655e6ba0a3293b41c2fe1d5da7a4e80710a2e5cd4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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