www.tiny.uzh.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0f:56:34:cc:71:b8:e8:b6:72:ab:0f:b7:b7:65:cb:93:7f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tiny.uzh.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:56:34:cc:71:b8:e8:b6:72:ab:0f:b7:b7:65:cb:93:7f
Serial Number (int): 266555681052790531551164598311373127783295
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:1e:90:c3:71:24:14:71:8c:25:ad:99:01:2b:b1:91:d1:be:c5:a6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:84:6f:17:de:74:fe:bd:1e:10:bc:2f:0c:f0:be:3d:23:c6:a6:cd
Fingerprint (sha256): 00:27:b1:f9:d2:66:cb:b4:2e:77:dc:71:dd:58:6d:3b:b0:c5:de:89:0e:a5:5c:0e:2e:be:af:e3:20:3b:6a:c6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.tiny.uzh.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tiny.uzh.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tiny.uzh.ch
www.tiny.uzh.ch

Other certificates including the domain name uzh.ch

(limited to 100 certificates)
www.msfinance.uzh.ch
www.phonebook.uzh.ch
ikmz-itmanagement.uzh.ch
webstats.uzh.ch
idladmn01.uzh.ch
www.phonogrammarchiv.uzh.ch
www.tiny.uzh.ch
www.medalumni.uzh.ch
www.evobio.uzh.ch
kitt.cl.uzh.ch
www.weiterbildung.uzh.ch
newsletter.uzh.ch
www.teachers.uzh.ch
www.rht2020.uzh.ch
geo441.wiki.geo.uzh.ch
www.planet-accounting.uzh.ch
www.zirp.uzh.ch
www.projekt175jahre.uzh.ch
www.rechteck.uzh.ch
mnf-44.uzh.ch
www.chir.uzh.ch
www.sciencelab.uzh.ch
www.caslg.uzh.ch
www.inform.uzh.ch
www.tiny.uzh.ch
www.medlead.uzh.ch
www.vertrauen-verstehen.uzh.ch
www.vetanatsammlung.uzh.ch
www.languageattitudes.uzh.ch
www.sustainability.uzh.ch
jupyterhub.anatomy.uzh.ch
www.cabmm.uzh.ch
www.cmme.uzh.ch
www.fvidg.uzh.ch
www.hochschulmedizin.uzh.ch
www.sciencelab.uzh.ch
www.pentateuch.uzh.ch
www.uniability.uzh.ch
www.sprachenzentrum.uzh.ch
www.vetpharm.uzh.ch
www.rd.uzh.ch
www.lsscairo.uzh.ch
www.bmel.uzh.ch
www.vetanatsammlung.uzh.ch
www.cees.uzh.ch
www.fintech.uzh.ch
www.gschmois.uzh.ch
www.vetbiblio.uzh.ch
idsmtp01.uzh.ch
ptl12.math.uzh.ch
www.zmb.uzh.ch
www.alumni.uzh.ch
www.sustainability.uzh.ch
www.econ.uzh.ch
www.linca.uzh.ch
www.tinnitus.uzh.ch
www.kjpd.uzh.ch
www.vetcom.uzh.ch
www.crpp-pain.uzh.ch
idsearch01.uzh.ch
demo.olat.uzh.ch
www.sozpsy.uzh.ch
intranet.csg.uzh.ch
wiki.icu.uzh.ch
zzm-kurs.uzh.ch
ldap.s3it.uzh.ch
www.comparativelinguistics.uzh.ch
www.agenda.uzh.ch
www.pa-bvk.uzh.ch
www.uniterm.uzh.ch
winterweek.icu.uzh.ch
www.oec.uzh.ch
getit.wiki.geo.uzh.ch
www.zhm.uzh.ch
www.ori.uzh.ch
www.imcr.uzh.ch
www.to2.uzh.ch
www.seon.uzh.ch
idltrav02.uzh.ch
www.comparativelinguistics.uzh.ch
www.finreg.uzh.ch
user.math.uzh.ch
www.ssn.uzh.ch
www.paracelsus.uzh.ch
www.blockchain.uzh.ch
www.methodenberatung.uzh.ch
fgcz-transfer.uzh.ch
www.psycholinguistics.uzh.ch
www.immunology.uzh.ch
www.webroot.uzh.ch
www.philosophie.uzh.ch
econgit.uzh.ch
www.rww.uzh.ch
www.chir.uzh.ch
www.ib.uzh.ch
www.uniabilitych.uzh.ch
www.unipublic.uzh.ch
www.global.uzh.ch
sdesk.uzh.ch
idhopep02.uzh.ch

Certificate

The complete raw certificate details for www.tiny.uzh.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266555681052790531551164598311373127783295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-28 22:27:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 22:27:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tiny.uzh.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 904223075244275941893929196909145136874978267227737686822599424554761516524096797729459878492999872022384072382314657651280685511758734140183582035254954514052269340753306334119466308418341012539007357040405872059835952255867242409518261495585442231665832112115920124933990262478646989546105240069901300434494651254058125691416577810421265121127719008163793438792413536738292539871953923073214337910592686405249901702748599818524945655702843187915298337700763629313380968143285866524427250997285675368521886987567379808883977249572477084117472234820353802126159635789564579370835386802773035527979092988341745650260639568599517467146833214366559979783532642156850965396079077696835967403123509565736227951890299896001897156057044844468201697786695122200240138238964835576816488140346006912610526390016528441396846488210832698136677994691001960730086285311550731194764650707294600123686547585331429086272216586093871536623573715453126567225047087787490761225054332143554605887136293461829710863383194694303573970324243742797725819178219822458529139944672335155219975428908305896758704143616546780830552325353214500342069729191623714591272419561566773487332990231405582283282033259231745106125948231057560029135590075854292948872874899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							461e90c3712414718c25ad99012bb191d1bec5a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiny.uzh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiny.uzh.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ba06a1b1c00000403004830460221009018e85302e68899713e6e9206a2dfb52e92e4c7e9674f18a826543f5d259b7d022100dcc68231cb01c685a0e0ed3eec695e141d421b121a8a6bc25826f82dc8b273c1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ba06a19de0000040300473045022100a986b1c971f2602f4b0d4fa1d5421c0004f8f8e234b57d8d5618c62430304746022074a84ce0efd0eed814049c44b1976ab08b83fc958afb54644d7c78583b028b33
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0038d3055f50973d61b1a8f2b23b304e451ea747f63504bceb920b39ea0125c529574826ca22d43f3a693405fad2ac3e8067105adbce2076ac3e5073c1512954582d7e527fcf1efd8fab6950181e769727ceee59f286571816b66c49632f765aa215a686be5784faedb665e4a0c8893ca577d9e745bf32b5a532856c0ebbca6de95d8ddd6cc01529154a9ab7c4cd727ddde069b98c6ed8457e6c71f60de7686a327392854d54d65f30974fa825f5247b872d1c482b6e3cfc19d2bc9372629401c01fd9ca67c74b8bc75b8023cd6386f9c3a4cf6429b12948c3c1feb45ac45e385dfddfd47e6ccaa46bf3de139f310b3ad6043bf9512b3b6a66e92062d52e9e4ae7