dotproject.hosting-24.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7f:e3:74:8c:95:2c:2b:d1:2f:40:b6:ec:4d:a7:48:c3:84 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dotproject.hosting-24.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:e3:74:8c:95:2c:2b:d1:2f:40:b6:ec:4d:a7:48:c3:84
Serial Number (int): 304855058307074701780822230723324658893700
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:64:e2:24:3d:4b:9a:87:b6:83:c9:0d:6c:fd:2e:e1:85:b7:44:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:13:95:d4:48:1e:d6:c5:34:38:26:24:54:a8:25:57:93:8a:0e:99
Fingerprint (sha256): e4:af:1d:2a:d1:7d:ee:31:07:32:f0:2e:cb:3b:80:98:c8:a7:a6:b3:02:a9:3f:bc:bc:e3:7a:0d:90:09:14:a2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate dotproject.hosting-24.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dotproject.hosting-24.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dotproject.hosting-24.ch
www.dotproject.hosting-24.ch

Other certificates including the domain name hosting-24.ch

(limited to 100 certificates)
dotproject.hosting-24.ch
hosting-24.ch
qdpm.hosting-24.ch
hosting-24.ch
pydio.hosting-24.ch
hosting-24.ch
projekt.hosting-24.ch
hosting-24.ch
fengoffice.hosting-24.ch
letodms.hosting-24.ch
projectsend.hosting-24.ch
collabtive.hosting-24.ch
*.hosting-24.ch
hosting-24.ch
hosting-24.ch
hosting-24.ch
hosting-24.ch
hosting-24.ch
eyeos.hosting-24.ch
projectpier.hosting-24.ch
dotproject.hosting-24.ch
projectsend.hosting-24.ch
qdpm.hosting-24.ch
hosting-24.ch
pydio.hosting-24.ch
eyeos.hosting-24.ch
letodms.hosting-24.ch
hosting-24.ch
*.hosting-24.ch
hosting-24.ch
phpfilenavigator.hosting-24.ch
letodms.hosting-24.ch
hosting-24.ch
collabtive.hosting-24.ch
qdpm.hosting-24.ch
fengoffice.hosting-24.ch
hosting-24.ch
pydio.hosting-24.ch
projectsend.hosting-24.ch
hosting-24.ch
hosting-24.ch
hosting-24.ch
eyeos.hosting-24.ch
projekt.hosting-24.ch
phpfilenavigator.hosting-24.ch
fengoffice.hosting-24.ch
phpfilenavigator.hosting-24.ch
projectpier.hosting-24.ch
hosting-24.ch
projectpier.hosting-24.ch
hosting-24.ch
qdpm.hosting-24.ch
hosting-24.ch
projekt.hosting-24.ch
dotproject.hosting-24.ch
hosting-24.ch
hosting-24.ch
hosting-24.ch
hosting-24.ch
collabtive.hosting-24.ch
hosting-24.ch
dotproject.hosting-24.ch

Certificate

The complete raw certificate details for dotproject.hosting-24.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxEVaQ/QYcpsNfpUTWEdw
JfMNcUQhubA4Zl19PTRTRwrk4Ink24Ad1zHZGe+tvFB2HPJit3GbRPCkGueVd8vm
coYmD3LxZs4Pv1GOKvNH2r78+zodRzgyo7bXVcTtutUElYnA8YSyby61pVuZwza0
BZ8lfKX5U2mgIq/9+5WB8DfZzAx41yr9P3sl5/AgZmb3/cQGdZTRE0KsZp5kjnuk
i33vNyylO4LOBjHEuQ0o/3DJtt9c03IAQmoVlNpGk6MNfmfr8j8Y3L8pb0RORPHW
+ScQf5PWSeKVzjIBTmyK0zOdHLw2eFjguktvtCJMyu80C3c60X6L3N8rZxCfvlMO
TZDZvYUP7kIQ6Xmauy4tIlYkqMffKa5eiw0V7gTBMmOzTyCTGMMwyniLjSsOSdG4
ZJ0lgVW/laL8+JxUs1ArQMHEoi0W7d7p+rdhEzafjjG8OcRKmGzcNkbkUNW5Iu79
yFQO2OdfzrbsaY5q3/goEMUWG+D9VHKu4Nmv1tUmisVRydXJ1czh5Gm8DsVq1S1k
EHZbw/UqBCqOMrFGCVzKCib1OyOEjATxchh+Rwmaxqrcu1Obt8izeVNXwZ6Us4ye
WYcWs/6x1pg/9PyvZt4WDnME/kJBcOnvYWsOs89/50GAJ4Hhlbima26GYVSPnohA
FQiKzsUwXtt81HB/dve7ml0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304855058307074701780822230723324658893700
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-16 20:53:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-14 20:53:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dotproject.hosting-24.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800715447959661327763314244888949564875252633099069098849018768391669104283731344715051676902193339967637855264611046767563023753447516149440965992971755433421901982654359224093000953589427906031433178413233666794746038507421186724700413772601057080121331819060288210074074922212981191909260267481797305737904019690889257494764771347568412689437332145906676510608373915739516889855182104913563462257221597375994468078861945039540052313063850467164076145276147686464085260126363437939276484463348579322229229708489061744549610193386523661320950871002900397964409725864984487816945518316538443988243634902082129240402923126275568524718382154617542088125885074869480339961107914027573123656423260193373447975340348355238750535508231503156773057847759836405722998248217252030224763976609870428887897982261204807397403069280329099512873755103891337424479344006319284941378641272247364251421455540418883560977158795111837924707756388989790217625940376580695711371332095147168271305317961410601087314312607803309356312611592430317284557012021070786353550448098128832041726798913811841933106192330400030686220583718947990552607454609184750425936897744566296194025864058228628353445410057221208311665701830766339454921139048977150196911413853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0264e2243d4b9a87b683c90d6cfd2ee185b7443f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotproject.hosting-24.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotproject.hosting-24.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005cf3dd21c3717358c9ea432e05aa423329efe6815227235c057d89b4c8a87877d17cac42f4118e34711b4f52676a50daf7a7cc74fb524ef256a2a15c111cdc3c411ad6b1f7209568c352563d04a416ea5b552c90494b83ed9162c63d39548379267f44c31eb0080ee80cb26723eaf0fb86f43755b5637b7e4e3f997f72dc7c829566dda7867b5f686ba649039ad5eb3c76dad1b78e2196dde2564c1943a0898795907b2c9152e623495b98d749dd0b84108f539661644de1a94f23afdb16f0135a41deab954433ff05ba7f7460cdff9332bef115e4d6b30bf99e17b7a235a5193265a3969028d3021b341a79c67b1860635500cbb3d8d87bc6a90321518ad4f2