matomo.maenjuel.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:14:24:56:e2:39:6b:a3:6a:02:81:1e:b9:ca:e7:8c:76:80 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=matomo.maenjuel.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:14:24:56:e2:39:6b:a3:6a:02:81:1e:b9:ca:e7:8c:76:80
Serial Number (int): 355303094399211734962530789747931367634560
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cf:ac:1e:73:7c:54:10:02:59:f0:79:fa:35:1c:f2:fe:90:36:d0:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0c:ab:0c:6b:38:eb:df:96:78:f7:39:d4:76:77:7d:b0:1a:d9:77:4b
Fingerprint (sha256): fe:56:01:9d:35:15:da:4f:ef:6c:19:db:0c:26:92:1d:8e:95:34:af:55:52:11:3c:83:35:b1:67:82:64:b1:55

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate matomo.maenjuel.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for matomo.maenjuel.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

matomo.maenjuel.ch
www.matomo.maenjuel.ch

Other certificates including the domain name maenjuel.ch

(limited to 100 certificates)
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
kimai.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
dl.maenjuel.ch
matomo.maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
matomo.maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
maenjuel.ch
wp.maenjuel.ch
matomo.maenjuel.ch
matomo.maenjuel.ch
maenjuel.ch
maenjuel.ch
maenjuel.ch
piwik.maenjuel.ch
maenjuel.ch
maenjuel.ch
wp.maenjuel.ch
l4m.maenjuel.ch
maenjuel.ch
matomo.maenjuel.ch
myt.maenjuel.ch
wp.maenjuel.ch
matomo.maenjuel.ch

Certificate

The complete raw certificate details for matomo.maenjuel.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355303094399211734962530789747931367634560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-15 05:25:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-13 05:25:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'matomo.maenjuel.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 606815038415023219614012069273898291733248147145743602442813278432809199518687575033716021883904236954695887765839848151404690157234285410539278709610696381185020872425277127651885835080543322289970846667749207126341530426442929921904210451846076049896155413471888486275997939715393018620917235234522680721747781543187391864755797788193929399019837400420850647784307714912018062364962206923318705907132818610276924763188290242594131377314320180547465723715790064291996263115132227185282448891625026374235630851375203067401010147246956779035006485151406032481978855995340816877959915538970100954657843318397226787782293902651604126502471383868050681564611391410868343492963641460328025391053906735851672355084575601570861499588853581966537945431310939764746446992844723293523476050630808460547190699379511977223238931823264294901414859874671806109694929207501703374068889060915681541387445865076146947373575395199801819333060917727056016935163920769027078769086648270474326084855092752896831640333650535104203348539390061251902030156290577172597170026596774255225677163957136683739867457342430638058001789580531425820238775099340954376732309653185255055810975758993813135275673629629140644960151031321210461823307979097628309793350229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfac1e737c54100259f079fa351cf2fe9036d041
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matomo.maenjuel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matomo.maenjuel.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001653c429dd6000004030047304502200a51da96cda4e8d1fe561eaabf658b014b5aa7b4220cd64822f47114a31c3121022100e0b2b42b0f2cc88e1a1fe0085b0860e173b13e412d00f947643a0d1a83dc0a2c007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001653c429fd00000040300483046022100b5855e8337550d34b4b1742a127a215298628973e9fb58b24ef3c97b8ab48c9e022100d7a98a37ab764b31f4b6f02721ab051128e0c1ed42bb6ac8addf97ad83f758e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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