campuslivealumni.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:da:ab:16:e0:ad:22:95:76:da:47:2b:81:1d:b9:de:ce:c8 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=campuslivealumni.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:da:ab:16:e0:ad:22:95:76:da:47:2b:81:1d:b9:de:ce:c8Serial Number (int): 422858116490592606516474358309686546976456
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 97:95:6c:71:bd:fa:39:c4:b6:ed:ca:30:30:2b:d5:75:e7:fd:0e:4c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ca:5f:07:0c:1b:c2:5b:ad:cd:b6:b3:dd:01:e0:07:b7:b0:f9:3c:e7
Fingerprint (sha256): 26:f2:b7:12:d3:a4:12:0d:66:06:12:f8:f0:5b:51:3b:54:67:93:51:ac:aa:83:a7:a7:02:50:15:a4:0a:30:f3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate campuslivealumni.ch
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for campuslivealumni.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
campuslivealumni.ch
campuslivealumni.ch.sabon.ch-meta.net
webmail.campuslivealumni.ch
www.campuslivealumni.ch
www.campuslivealumni.ch.sabon.ch-meta.net
campuslivealumni.ch.sabon.ch-meta.net
webmail.campuslivealumni.ch
www.campuslivealumni.ch
www.campuslivealumni.ch.sabon.ch-meta.net
Other certificates including the domain name campuslivealumni.ch
(limited to 100 certificates)
Certificate
The complete raw certificate details for campuslivealumni.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGnTCCBYWgAwIBAgISBNqrFuCtIpV22kcrgR253s7IMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MzAyMzEyNDRaFw0x ODExMjgyMzEyNDRaMB4xHDAaBgNVBAMTE2NhbXB1c2xpdmVhbHVtbmkuY2gwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+prDrsmzSQmKS3hbkDCVJeHym JTppYGCHQ37vsXNPBdUX1PeN6RM0LhXEXVjmLxQsoJcmNhEIZS5P9neiX6TVvkgG ZksZytztj6sm9kFKNWiwyw77nGgurlPiN3vIEy85d8XsrgfSWB76jW0OqdQpgaWq npbqRRX/eR/d8BG28tLztJe95w5cYbmxIdkSa7NhKlA9HquO2OjAhi7yRCXmVYi6 8A/IoNq1tewi+zqu2lnfqZqyJZ23MgjZ/pRgx+9dQATq1I5hKiU3oFf274pkWH1i e7VTHNowoVYVzVx6zuFaKDaU9uVgFhGWIZMd59D4cRCxOGY7saPelsYq6os7AgMB AAGjggOnMIIDozAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJeVbHG9+jnEtu3KMDAr 1XXn/Q5MMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wgagGA1UdEQSBoDCBnYITY2FtcHVzbGl2ZWFsdW1uaS5jaIIlY2Ft cHVzbGl2ZWFsdW1uaS5jaC5zYWJvbi5jaC1tZXRhLm5ldIIbd2VibWFpbC5jYW1w dXNsaXZlYWx1bW5pLmNoghd3d3cuY2FtcHVzbGl2ZWFsdW1uaS5jaIIpd3d3LmNh bXB1c2xpdmVhbHVtbmkuY2guc2Fib24uY2gtbWV0YS5uZXQwgf4GA1UdIASB9jCB 8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENl cnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFy dGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRl IFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0 b3J5LzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3ACk8UZZUyDlluqpQ/FgH1Ldv v1h6KXLcpMMM9OVFR/R4AAABZY1TNCQAAAQDAEgwRgIhAJ0c7xFXuCU+V4gQO770 lURtNS5DN2qAHNzMFBIu7ukcAiEAxeyoSjQemXTjl4OiEOOOl7qFGqwCCzKC5KLo 1o1zfscAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWWNUzXl AAAEAwBHMEUCIQCptmq7XzEbmVAPPQ+ka7wS0U2vXm47i+PzVUhZeWUK7wIgKxG9 iXkg48i02tI6HC6p8NivjG24pwq+Zo2mQgZWTBcwDQYJKoZIhvcNAQELBQADggEB ACi1Tqtz9okl5b5edozGj7e9313DIGSjU9h1pkPGJEcIWQs4KFGyftzxdrDFqwbh Fh8QXe9FHUzqwp/eb8ycVcxv9X1kDY87Q0LZ0vi6Lo8TRHJ7qF+pLqyVNnkQ2pqp y+oXKh+Hkl7z4QSqK1ZArtuspEHniBsWwlmf8zSYBQKsTEVlThalkJfsOYZ+4ueb 2P+tjyXLVH9NR7Nxy4hWivHiWfi3zNBqbFz7IH3ljtzekG6flAVuXHfXDJ5lt4K5 WcXh29fzRpqUjnIu3E9upuO70yJ7sD/oWAFai0BGW9zu6OOu4KSdwCO4kE6EP3XO Q7/6aeJOy0BAHUq6y302Nac= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqaw67Js0kJikt4W5Awl SXh8piU6aWBgh0N+77FzTwXVF9T3jekTNC4VxF1Y5i8ULKCXJjYRCGUuT/Z3ol+k 1b5IBmZLGcrc7Y+rJvZBSjVosMsO+5xoLq5T4jd7yBMvOXfF7K4H0lge+o1tDqnU KYGlqp6W6kUV/3kf3fARtvLS87SXvecOXGG5sSHZEmuzYSpQPR6rjtjowIYu8kQl 5lWIuvAPyKDatbXsIvs6rtpZ36masiWdtzII2f6UYMfvXUAE6tSOYSolN6BX9u+K ZFh9Ynu1UxzaMKFWFc1ces7hWig2lPblYBYRliGTHefQ+HEQsThmO7Gj3pbGKuqL OwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 422858116490592606516474358309686546976456 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-30 23:12:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 23:12:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'campuslivealumni.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24067476386788761096320210225200332676694515655231892241029181676960539941107481102478392577578502136409422392881251217011674682817984688388194664121109501438593368865934480553887899795058359091203466382478083990081575012984219081461707151750714114439933467128422711763002822005969282205931717776463904942842200781781762990512794747452522248513677247911259461407231343767624121778346374110991772467117838192694303585057301945492686951549100221250369425470928341579124917734055873713303302682341839299588421233366592177709481258769399631732662261805617276053556865414785930326730486703793928297439560000033570316520251 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 97956c71bdfa39c4b6edca30302bd575e7fd0e4c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (160 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campuslivealumni.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campuslivealumni.ch.sabon.ch-meta.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.campuslivealumni.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campuslivealumni.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campuslivealumni.ch.sabon.ch-meta.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001658d53342400000403004830460221009d1cef1157b8253e5788103bbef495446d352e43376a801cdccc14122eeee91c022100c5eca84a341e9974e39783a210e38e97ba851aac020b3282e4a2e8d68d737ec70076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001658d5335e50000040300473045022100a9b66abb5f311b99500f3d0fa46bbc12d14daf5e6e3b8be3f355485979650aef02202b11bd897920e3c8b4dad23a1c2ea9f0d8af8c6db8a70abe668da64206564c17 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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