wp.maenjuel.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e1:cc:46:77:ce:fd:76:27:a8:4b:11:e0:de:fa:69:8d:5d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wp.maenjuel.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e1:cc:46:77:ce:fd:76:27:a8:4b:11:e0:de:fa:69:8d:5d
Serial Number (int): 425284204686178548002256762468116778814813
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a4:3c:5e:6a:3d:c6:03:df:2b:7d:d6:97:1c:c4:de:f8:d1:01:fc:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:74:62:f2:0f:20:be:18:29:43:96:11:b7:02:6b:cb:c8:89:7f:4b
Fingerprint (sha256): fa:37:66:cc:77:73:f1:a9:9d:96:e5:41:a4:60:14:9a:14:bd:e6:ba:c2:1f:88:e2:b2:16:f5:90:3d:7d:ae:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate wp.maenjuel.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wp.maenjuel.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wp.maenjuel.ch
www.wp.maenjuel.ch

Other certificates including the domain name maenjuel.ch

(limited to 100 certificates)
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
kimai.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
dl.maenjuel.ch
matomo.maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
matomo.maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
maenjuel.ch
wp.maenjuel.ch
matomo.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
maenjuel.ch
wp.maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
myt.maenjuel.ch
wp.maenjuel.ch
matomo.maenjuel.ch

Certificate

The complete raw certificate details for wp.maenjuel.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425284204686178548002256762468116778814813
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 15:20:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-10 15:20:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wp.maenjuel.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718339925144089337154589519916244513052346094711521482949754060203691737109569005670647690509537466207527102147177531886680563489707960724466737872589763581206774621043751333825802764243018607418241662111395401528418297949484876266105289937908249458983303544452916479907595173034688122267317046132978083756486676617761494122353940968841467822232147978558444131186735956612090021758013419867172346501287847132289507643118098883765726355611187629595800975295474762130565389019848051262054278969703925480701263100277946124740694851484083019426883192631736420810537086955683010419488081351329459387933362426342978313136825196144312253399143511578029720654906516481135439407621226040199656989489124173172576462266426229763019048249099535285542977584912586036173035457179676548019161338317216999950249434940257545811276096010639204225467925105231080173435859742513185458713575532233316903185151874435284864061601940635114514634350370306868350538883660971055888855145197511888449052616992747847108294088996065544403096589059948868049270373809857956986534802170663450509852967348676171876451481618516803476733239077863881581006906243779404698381352241504529589207051172829816939121531279504204901724468327581192734014711830094789340766525871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a43c5e6a3dc603df2b7dd6971cc4def8d101fc7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp.maenjuel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wp.maenjuel.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016972b453bc000004030046304402202da886e9d0bb88a614e1c1e833af25569b78757b90e841648ff96ff25ecc6e0a02207fa7a0fc9d365bb12562f3418bcc7cfee7d2c714cb62114e10e2c1faeb3fb291007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016972b455c100000403004730450220530fc9ce5026dad299e9cbc2b3a5044b8c12741e246589a267fdf8711800d80e022100a17c65eb5e4be100411ae5a8a0ab5234e38f5da9f4de55fb0b5ac13dbefee6ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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