www.xydec.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:8e:ec:7a:cd:02:ed:ad:fd:2f:01:f5:58:5b:ed:93:8b:4b was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.xydec.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:8e:ec:7a:cd:02:ed:ad:fd:2f:01:f5:58:5b:ed:93:8b:4bSerial Number (int): 309971289323401966507388147899795768576843
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7f:58:1d:0b:73:ac:81:32:ec:0b:c3:9c:ee:ba:fd:ae:e9:ae:e4:7e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bc:f9:ec:75:80:b4:e9:59:15:1a:45:ff:61:71:19:89:72:3c:c0:21
Fingerprint (sha256): ea:1f:11:ed:83:9c:e5:7f:c7:52:f3:9e:02:d4:e8:ca:71:ef:75:b8:4b:e0:c2:d5:8c:0a:64:0d:e7:c9:ad:5b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.xydec.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.xydec.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.xydec.ch
xydec.ch
xydec.ch
Other certificates including the domain name xydec.ch
(limited to 100 certificates)
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
xydec.ch
www.xydec.ch
xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
xydec.ch
www.xydec.ch
xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
www.xydec.ch
Certificate
The complete raw certificate details for www.xydec.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISA47ses0C7a39LwH1WFvtk4tLMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMzAwOTQ5MzVaFw0y MDAyMjgwOTQ5MzVaMBcxFTATBgNVBAMTDHd3dy54eWRlYy5jaDCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAMS3zP5xM3eXZM0elaB5+2HJsfVe4NMo9In6 +4FT76AuQg0eT3jYmGBea+Al65HpzITFjziI7tTvmUAbGKO1Haoqj1YOlmgEzeME v0t7fz7pmmi75E25KzcBDTo2fx1JIryci9Bc5BZb+Gg9eDlV68UZZ+fkpp6rpe2l yVYZ6caC/VqTUEu0di9ubrcsPWhmBg9HLMFEDGHwzMSo4EdFDmTh6JcxFYa1RPAl YmSLNbcdCYUD+nFoZ2ynmgek4s915Q7gnUP8b845GeYQtkoAORyK6faUQLwosIZx UTmSAnWIEA0YcbBHlB6htjZIjGDU+KSZrq+UYcgjqaVWEdJIyBUCAwEAAaOCAm0w ggJpMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUf1gdC3OsgTLsC8Oc7rr9rumu5H4w HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzAhBgNVHREEGjAYggx3d3cueHlkZWMuY2iCCHh5ZGVjLmNoMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcAXqdz +d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFuu+4gfAAABAMASDBGAiEA hlQnFC+s9GBtTUG79N9GlBBRwTOOU7hI77h5v9qCY0UCIQCdCS3e6cvUl8vUCKIs PZQhARtHdQCkQKZjXYD8kv05TQB3AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxh Ohpp06IcAAABbrvuINoAAAQDAEgwRgIhAPNR7SafSEvzrkfJ7lmWp0ycWriVNIhL Tm8wxHK0AVYqAiEAkF/JtJXXSho8zxeQdiIslp70GGVnTCKuz7TBm69z+dswDQYJ KoZIhvcNAQELBQADggEBAHK5yXT+8oktlgIXzJqdL6rljG367p3WBwSP5ugQhgZJ ZvrH6c5Ns/irf40P8PW4w5CuL5RmuogYO4KJS9ZREjARqTyytCUeqSu1d5YKy0NN sBLslW6Xl5HJv/Ql9cCYfyxQLwBE4fYTxrreY3XI1pO3N89FBrScRqepEx0G5TP/ lZWdTv6DRycakMcYbYEXg2/i+Z5GNR00svygc47ZiNWdstkuSQj69KKz8jh36pEc Yna3vcvv7eS0QxObSlYLCJ8QuOPasd04GV4voPXaKl8Qx6za8ns1VDXYeFkTkz8x +ZOBjAagUPudXW1dE0gUDHI+41OkqvuGPkBcx2F3Ihw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLfM/nEzd5dkzR6VoHn7 Ycmx9V7g0yj0ifr7gVPvoC5CDR5PeNiYYF5r4CXrkenMhMWPOIju1O+ZQBsYo7Ud qiqPVg6WaATN4wS/S3t/PumaaLvkTbkrNwENOjZ/HUkivJyL0FzkFlv4aD14OVXr xRln5+Smnqul7aXJVhnpxoL9WpNQS7R2L25utyw9aGYGD0cswUQMYfDMxKjgR0UO ZOHolzEVhrVE8CViZIs1tx0JhQP6cWhnbKeaB6Tiz3XlDuCdQ/xvzjkZ5hC2SgA5 HIrp9pRAvCiwhnFROZICdYgQDRhxsEeUHqG2NkiMYNT4pJmur5RhyCOppVYR0kjI FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 309971289323401966507388147899795768576843 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 09:49:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 09:49:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.xydec.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24833343304893266211095886914434767250536957730609661802369223784980120949345830796034298335048678773490719818432564643785040917587957299771294209623765593271697613551876487993650630685689311012360640595853427196247447118022614750841074577356635610019877343648245423491111112042452580326617467251607867116131247154075564523300529076875460634324849204774962983283397283881287742199067643111229547383117845855942284964348575676351313887075289730360866427007640198779331893804932096640674766947857232609888152110134837483886001591908384919733393100925359674879289506388464843793366035378195751634490277069556623891548181 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7f581d0b73ac8132ec0bc39ceebafdaee9aee47e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xydec.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xydec.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ebbee207c0000040300483046022100865427142facf4606d4d41bbf4df46941051c1338e53b848efb879bfda8263450221009d092ddee9cbd497cbd408a22c3d9421011b477500a440a6635d80fc92fd394d00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ebbee20da0000040300483046022100f351ed269f484bf3ae47c9ee5996a74c9c5ab89534884b4e6f30c472b401562a022100905fc9b495d74a1a3ccf179076222c969ef41865674c22aecfb4c19baf73f9db . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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