lameridiennedecoration.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:14:b9:8e:e0:29:20:a9:28:fc:35:a1:f4:f3:e1:5f:6c:0b was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lameridiennedecoration.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:14:b9:8e:e0:29:20:a9:28:fc:35:a1:f4:f3:e1:5f:6c:0bSerial Number (int): 268389154165591844494533560473557443505163
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 59:92:7d:11:db:d7:63:99:49:71:58:4e:23:29:b2:44:ac:89:36:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 42:e4:a2:fd:4a:38:7d:55:04:72:9f:d5:3f:3e:74:21:5b:61:c0:08
Fingerprint (sha256): ef:62:19:4a:9a:91:a9:bb:f1:92:15:c8:5c:eb:16:df:b8:98:3f:9f:d7:2b:e7:04:5a:fb:dd:24:11:a9:b3:90
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate lameridiennedecoration.ch
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lameridiennedecoration.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
abcdecoration.ch
lameridiennedecoration.ch
mail.lameridiennedecoration.ch
www.abcdecoration.ch
www.lameridiennedecoration.ch
lameridiennedecoration.ch
mail.lameridiennedecoration.ch
www.abcdecoration.ch
www.lameridiennedecoration.ch
Other certificates including the domain name lameridiennedecoration.ch
(limited to 100 certificates)
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
lameridiennedecoration.ch
Certificate
The complete raw certificate details for lameridiennedecoration.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISAxS5juApIKko/DWh9PPhX2wLMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAzMDIxNjI5MDNaFw0x ODA1MzExNjI5MDNaMCQxIjAgBgNVBAMTGWxhbWVyaWRpZW5uZWRlY29yYXRpb24u Y2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQgUUFZkfplSmM2cp0 luxNqu+iTynuAcBc7239Tgdr/XxRGFMg0i+Cx6JpQj8WTDd8fjE2f/3KzOnhy4aO Hw4AzgWuzWA+Y4g5psPzafX8R9XUgqQJ5Cl9AEakvSu25aWBAduQL5QL9q86oiIu ahzpxzDF8bpkQy3nQseWYkVf8icT7k/BM2194MKB+MXXIfh99AuPJE7Qh3sZQ6Aq vlaod58VU/WOodYbD5V1TCG2L0xJ0eiSphtu8HVTszaF1QOygItQkJEmmKRCODzT AarJbLe2xYYSmoCFaKHz/umDZN+uAHTrT2wz6e7kueK/w72+U8it3/IJxwe/uHqW +gj1AgMBAAGjggKDMIICfzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFmSfRHb12OZ SXFYTiMpskSsiTbdMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wgY0GA1UdEQSBhTCBgoIQYWJjZGVjb3JhdGlvbi5jaIIZ bGFtZXJpZGllbm5lZGVjb3JhdGlvbi5jaIIebWFpbC5sYW1lcmlkaWVubmVkZWNv cmF0aW9uLmNoghR3d3cuYWJjZGVjb3JhdGlvbi5jaIIdd3d3LmxhbWVyaWRpZW5u ZWRlY29yYXRpb24uY2gwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQB gt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y ZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJl IHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2Nv cmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRw czovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOC AQEAPpebFBjSGa1z7h86omXe5eH2QTo34fwO0b8fRSW6EN8vnUyYrvaZ8froRXhn 7bwhqvtCzqllXJ55O6cdDT0UpKSU+EiA6T70mLbXAsnXuygS26XK1DUUf5Q5Ab4M u6MNxAn+2y54czYv9FJwxny+L5DaJbdBqXOoWU3rNypTPD1toeXo3RvUe+KgmF3H TOyJ1/C1lCkm5l8o/iHGNWsgqH7Hzr7ycQrACSjUdCjulvI/iejGzZf8OdHupmtH svzqJn4Dbrmo9jyF1qeccuCKXiGyXtyaTmBmYgl0d9Yf0H4det4ny3Xs2Zjbtp9G eldJ9yH3C2hvN4XCiC9TfbbMOA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IFFBWZH6ZUpjNnKdJbs Tarvok8p7gHAXO9t/U4Ha/18URhTINIvgseiaUI/Fkw3fH4xNn/9yszp4cuGjh8O AM4Frs1gPmOIOabD82n1/EfV1IKkCeQpfQBGpL0rtuWlgQHbkC+UC/avOqIiLmoc 6ccwxfG6ZEMt50LHlmJFX/InE+5PwTNtfeDCgfjF1yH4ffQLjyRO0Id7GUOgKr5W qHefFVP1jqHWGw+VdUwhti9MSdHokqYbbvB1U7M2hdUDsoCLUJCRJpikQjg80wGq yWy3tsWGEpqAhWih8/7pg2TfrgB0609sM+nu5Lniv8O9vlPIrd/yCccHv7h6lvoI 9QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 268389154165591844494533560473557443505163 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-02 16:29:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-31 16:29:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lameridiennedecoration.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26321312655243227230590149342257864911270700948083342073424529167871261140103205818787449701087226566450872138392149959500334519990444214960049016017808589844939903602979006686177690183821659384749522375475129418814758910295871095128550129113526930945555029177457136087088755783511397333678008327301815110659780038794710685091081173679348142773509232893132769106401322177335276733194729106832024406585114649968214900176993040973490792834411792973772368572085026087013461899064278713103472230077500737345726734947100182838434939535687041324829635658506453414097936237582910184875598305375773883636223877070452938115317 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 59927d11dbd763994971584e2329b244ac8936dd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcdecoration.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lameridiennedecoration.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lameridiennedecoration.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abcdecoration.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lameridiennedecoration.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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