www.gartenambiente.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d6:3c:0e:37:85:5a:66:8c:80:c8:d5:76:43:9e:87:72:5c was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gartenambiente.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d6:3c:0e:37:85:5a:66:8c:80:c8:d5:76:43:9e:87:72:5c
Serial Number (int): 334237111814362537001058406760158601900636
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:84:a1:d2:4f:07:87:4f:d2:8d:e4:b6:16:b9:7c:49:da:88:a3:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b6:32:cb:b0:8b:7b:db:e6:4c:9b:58:a1:90:fe:f9:3a:fb:44:28:da
Fingerprint (sha256): e3:be:23:19:21:2b:83:51:27:fd:60:91:fb:49:a9:c5:47:60:73:4d:25:8a:34:ef:43:d6:15:1d:76:98:da:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.gartenambiente.ch

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gartenambiente.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eternit.gartenambiente.ch
gardena.gartenambiente.ch
gartenambiente.ch
metallico.gartenambiente.ch
shop.eglijona.ch
shop.silkandfine.ch
silkandfine.ch
www.gartenambiente.ch
www.silkandfine.ch

Other certificates including the domain name gartenambiente.ch

(limited to 100 certificates)
gartenambiente.ch
gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
gartenambiente.ch
gartenambiente.ch
www.gartenambiente.ch
gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
gartenambiente.ch
dev.garten-villa.ch
www.gartenambiente.ch
www.gartenambiente.ch
gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
gartenambiente.ch
dev.garten-villa.ch
www.gartenambiente.ch
dev.garten-villa.ch
amadeo-ambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
www.gartenambiente.ch
gartenambiente.ch
gartenambiente.ch
gartenambiente.ch
dev.garten-villa.ch
gartenambiente.ch
www.gartenambiente.ch

Certificate

The complete raw certificate details for www.gartenambiente.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334237111814362537001058406760158601900636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 14:17:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 14:17:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gartenambiente.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733542099006162676438848904165802730300687820162175491076219550540345836050419019805081587583626259048621717924197155652780836302198004131651134429961665432831697936050244449791251653764985157782818940838340499953749886461281567403148855085071233088078575835320974910940941292485349263373094480260823733742245252518855586943637159719173224936707843749902722961461587789810677491772308218220671775675392463212368153583568979814423530131395723841688421897605209707546601528637583783433825487860146546105148910426997440351250721865805604349794217758333672073076073391448162828637662439838995333500876954055183068227402129187225529194078271647845728057278519011040952528515841222765473358059473039602653794309760049057333354788978886389177113760968303937996563527926783791262946943127676871978206106587425881259695250737363355411676607466273651267733401376296995848573915699708694060912959660600252805137215625837190957974628242386771784789947586321175405253932540907420561734714908216286214082502248504425484022953932658629530881473142211259223407701732179420407629387646117994882125187447229642794823992180800504863939540109593298150601283128857661224169244023392529891592771786756625871140995838798677566152203045220030043332777863261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5484a1d24f07874fd28de4b616b97c49da88a332
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (203 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eternit.gartenambiente.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardena.gartenambiente.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gartenambiente.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metallico.gartenambiente.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.eglijona.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.silkandfine.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silkandfine.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gartenambiente.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silkandfine.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a61f61a1000004030047304502210094b37055d8c4b31660927f3ce9e33cad70d02b5bf77eac7314509e47f398b66902201111170fed12e543f1a030006f659711df8975fd3496e4c1b34e3b102dc72fec007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a61f616c0000040300463044022039e834d336cf0bb41a7a98db668aa6066e1b610f226d9918107887fc63622eee022073d4c225591fcbce24f0ba0a6154a212450265ad2674d54e60a7222fce0f2c15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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