awa-s.deutscheinschaetzung.migroszh.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:cd:6b:d8:3f:f1:bf:12:c9:a9:47:35:ac:30:bd:fc:e5:55 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=awa-s.deutscheinschaetzung.migroszh.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cd:6b:d8:3f:f1:bf:12:c9:a9:47:35:ac:30:bd:fc:e5:55
Serial Number (int): 418350379174448727663507728518404147832149
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 19:47:93:bf:16:d4:44:a0:35:14:54:0e:dd:e4:15:c8:34:94:7e:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 77:c5:61:7e:27:8f:eb:e9:8f:e9:68:cc:16:25:69:b6:1e:16:23:8f
Fingerprint (sha256): ec:1c:2f:9c:04:97:6d:15:b0:7e:a5:81:1c:5b:98:60:e0:8b:0a:a0:b3:9b:c1:32:d7:2a:da:d6:a6:a0:73:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate awa-s.deutscheinschaetzung.migroszh.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for awa-s.deutscheinschaetzung.migroszh.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

awa-s.deutscheinschaetzung.migroszh.ch

Other certificates including the domain name migroszh.ch

(limited to 100 certificates)
portal.migroszh.ch
afag-sense-live.migroszh.ch
portal-t.migroszh.ch
k8s-dev-external.migroszh.ch
awa-t.deutscheinschaetzung.migroszh.ch
k8s-prod-external.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
outlook.migroszh.ch
k8s-infra-internal.migroszh.ch
webdeploypzs.migroszh.ch
k8s-infra-internal.migroszh.ch
alarm2.migroszh.ch
citrix.migroszh.ch
portal-s.migroszh.ch
k8s-prod-external.migroszh.ch
autodiscover.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
k8s-staging-internal.migroszh.ch
alarm1.migroszh.ch
alarm2.migroszh.ch
portal-t.migroszh.ch
anmeldung-s.feriencamp.migroszh.ch
afag-sense-live.migroszh.ch
mail.datacenter-migros.ch
citrix.migroszh.ch
citrix.migroszh.ch
k8s-prod-internal.migroszh.ch
k8s-infra-external.migroszh.ch
k8s-staging-external.migroszh.ch
anmeldung-s.feriencamp.migroszh.ch
k8s-staging-internal.migroszh.ch
k8s-dev-internal.migroszh.ch
mail.datacenter-migros.ch
k8s-infra-external.migroszh.ch
alarm2.migroszh.ch
szc.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
mail.datacenter-migros.ch
gmzsbc.migros.cloud
awa.deutscheinschaetzung.migroszh.ch
mail.datacenter-migros.ch
mail.datacenter-migros.ch
alarm1.migroszh.ch
outlook.migroszh.ch
k8s-staging-internal.migroszh.ch
k8s-prod-external.migroszh.ch
alarm1.migroszh.ch
anmeldung-t.feriencamp.migroszh.ch
portal-t.migroszh.ch
awa-t.deutscheinschaetzung.migroszh.ch
k8s-prod-internal.migroszh.ch
citrix.migroszh.ch
k8s-staging-internal.migroszh.ch
outlook.migroszh.ch
anmeldung-t.feriencamp.migroszh.ch
gmzsbc.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
k8s-dev-internal.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
citrix.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
awa-t.deutscheinschaetzung.migroszh.ch
k8s-staging-external.migroszh.ch
outlook.migroszh.ch
anmeldung.feriencamp.migroszh.ch
alarm1.migroszh.ch
autodiscover.migroszh.ch
outlook.migroszh.ch
k8s-infra-external.migroszh.ch
outlook.migroszh.ch
outlook.migroszh.ch
k8s-prod-internal.migroszh.ch
portal.migroszh.ch
anmeldung.feriencamp.migroszh.ch
anmeldung-t.feriencamp.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
k8s-dev-external.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
afag-sense-live.migroszh.ch
anmeldung.feriencamp.migroszh.ch
alarm1.migroszh.ch
portal.migroszh.ch
mail.datacenter-migros.ch
awa-t.deutscheinschaetzung.migroszh.ch
portal-t.migroszh.ch
autodiscover.migroszh.ch
k8s-staging-external.migroszh.ch
k8s-infra-external.migroszh.ch
outlook.migroszh.ch
alarm2.migroszh.ch
k8s-prod-external.migroszh.ch
awa-s.deutscheinschaetzung.migroszh.ch
outlook.migroszh.ch
owa.migroszh.ch
k8s-dev-external.migroszh.ch
gmzsbc.migros.cloud
alarm2.migroszh.ch
k8s-staging-external.migroszh.ch
awa.deutscheinschaetzung.migroszh.ch
citrix.migroszh.ch

Certificate

The complete raw certificate details for awa-s.deutscheinschaetzung.migroszh.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcoxsGkUwC3SuOLbJYBG
QnBFni8lV7PSxX6+/s7bWVZ5MIN03Wec+U1vUoMIRm0bafPqx8lwEsshVFccl35G
4hT9IQG8JC2q1QaoekI/jxWjVgyLFXFTpPniWgktWaM5UndxJ1TJwn3P6pRtI6Q+
oKlzJoyH5zS7Qa3Vv9lUKrEpblCb33FYYzZFR9X7lFF7HVLPeFSG/eIJblru/EZ+
RnriL5ngKZjAZLQsz6CslowuNoz3MG7H3DbZ3PwwSeil5ji0pFryrkrhBWsL0kEP
6MxL37Wh5+hhEs1fRQE9vIgqOfuHWEMSPccvDEOUy92GKw/EZuRZty1YcltsPV9G
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418350379174448727663507728518404147832149
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-10 05:00:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-10 05:00:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'awa-s.deutscheinschaetzung.migroszh.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24463698484282360757594675745896246784654642947031921844515163195280416785540845876276341152886932310927817123370923639267163145438378323239144510893164763503854156605942012896311299415052872769641244828443834317320619406069427523972362995642482954630125397667625004408938783450243885064672400945320176086300834665356340072593011661766495925687478299855294799200792772032536773894847174254366399477155965616738350001974756370465587361528231855380184770834177364394547177288816305552437277635562283923485883222926993653966523742465139122888831879419339502597718741821807698722793825514380119359422248782822375161808553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							194793bf16d444a03514540edde415c834947e83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awa-s.deutscheinschaetzung.migroszh.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001859a44236f00000403004630440220688b8d042d785b471a4721b4d72afa3f210171f32e04409dddfd2dd81e4a8d4e022063aeafdc355c0eb32caeab691e327ece27db00779fcf31f892d5cc68c731be410076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001859a442383000004030047304502202a7a60bf239ef6eb2b6d35d938b3fcebc7c0cf0b2179cd2a2f41d203e70e903e022100876c44590c5f7229029eca4e0f84087df7c246a41f46574e7a2ae58b83d4a5c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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