tequila.epfl.ch

- École polytechnique fédérale de Lausanne -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:a6:3f:f3:f7:a1:41:07:77:69:51:6c:08:a9:41:48 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

École polytechnique fédérale de Lausanne

Organization: École polytechnique fédérale de Lausanne
Locality: Lausanne
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:a6:3f:f3:f7:a1:41:07:77:69:51:6c:08:a9:41:48
Serial Number (int): 18143182344606950329939578484872003912
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 73:27:c8:af:69:fa:c6:37:22:0c:f3:7d:d5:3b:a2:c6:52:57:47:ee
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 24:f7:e5:43:16:01:d9:12:e6:bf:ea:0a:6a:4d:4c:b7:48:8f:f2:6a
Fingerprint (sha256): 00:90:84:0a:e7:1b:e3:53:cc:9d:65:1f:ac:5c:bf:79:40:ed:4b:9d:3d:91:f4:f6:55:01:3f:d0:f3:35:43:41

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate tequila.epfl.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tequila.epfl.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tequila.epfl.ch

Other certificates including the domain name epfl.ch

(limited to 100 certificates)
nocsrv4.epfl.ch
asysmic.epfl.ch
ipese-mattermost.epfl.ch
lcvmwww.epfl.ch
tequila.epfl.ch
d3dev.epfl.ch
agepolysrv2.epfl.ch
icchilisrv3.epfl.ch
bib-ezproxy.epfl.ch
ssl470794.cloudflaressl.com
rgl.epfl.ch
script.epfl.ch
support.epfl.ch
spism.epfl.ch
sti-forums.epfl.ch
clic.epfl.ch
voting.epfl.ch
*.epfl.ch
zimbra.epfl.ch
frontiers2018.epfl.ch
sme.epfl.ch
ptpsrv3.epfl.ch
cmspc11.epfl.ch
dev-tequila.epfl.ch
network.epfl.ch
enacit-docuwiki.epfl.ch
clockprofile.epfl.ch
aclic.epfl.ch
benevoles.balelec.ch
psychoprot.epfl.ch
slims-uplin.epfl.ch
dslab.epfl.ch
go.epfl.ch
pocketcampus.epfl.ch
www.epfl.ch
lsmpc42.epfl.ch
test-courseware.epfl.ch
bbpcode.epfl.ch
intranet.forum-epfl.ch
test-payonline.epfl.ch
asgard.epfl.ch
igmgesrv2.epfl.ch
je-odoo.epfl.ch
lvgtools.epfl.ch
lca1srv2.epfl.ch
support.epfl.ch
medco.epfl.ch
clic.epfl.ch
ditsbsrv16.epfl.ch
mongodb-svc-1.epfl.ch
lsisrv4.epfl.ch
stisrv13.epfl.ch
suite.suisse.concours-alkindi.fr
festivalrobotique.epfl.ch
tclweb.epfl.ch
influxdb.epfl.ch
cdm-it.epfl.ch
act4change.epfl.ch
enacdrives.epfl.ch
lasigvm2.epfl.ch
tclgit1.epfl.ch
icchilisrv3.epfl.ch
face-search.epfl.ch
cmspc11.epfl.ch
energylabs.epfl.ch
onlyoffice-scistimm.epfl.ch
sapservices.epfl.ch
tclgit1.epfl.ch
privyseal.epfl.ch
spism.epfl.ch
infoscience-authors.epfl.ch
mleg.epfl.ch
enacshare-test.epfl.ch
slims-powerlab.epfl.ch
com402.epfl.ch
secure-it.epfl.ch
infoscience.epfl.ch
ssl470796.cloudflaressl.com
bmisymposia.epfl.ch
petitesannonces.epfl.ch
s2e.epfl.ch
dotty.epfl.ch
tclgit.epfl.ch
lmhibm5.epfl.ch
sdscgesrv1.epfl.ch
dllsti250.epfl.ch
icsil1.epfl.ch
*.dhlab.epfl.ch
enacit2web1.epfl.ch
lsisrv7.epfl.ch
tclgit.epfl.ch
visualizer.epfl.ch
sni.cloudflaressl.com
dcim-neo.epfl.ch
ewa.epfl.ch
intranet.forum-epfl.ch
sbitsrv8.epfl.ch
smtp1.epfl.ch
webmail.epfl.ch
sv-facilities.epfl.ch

Certificate

The complete raw certificate details for tequila.epfl.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18143182344606950329939578484872003912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lausanne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'École polytechnique fédérale de Lausanne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tequila.epfl.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833972310014994936908468030316873749623522246604787460413474871976498731062036371608563874146851739393088167999135556624013887852890731792046314137020573107487090559087095919109122020783775421133621157801044270167453487825375879908551437463175277958602592355171712789129734109603353800385403141515304816711257482981289390895536890141513403660464681609740304509876327618467777471101607285704402434698251769927127520038824298397455192059122026378829354858553316834924912278148376394891000355324374638374562945994195483972433123326206738135150355368597860163140752041531311908935783792996999598074767625332246832245433876253383757996235923384011710047110413091378499136877029990899975975189762949984346058395596544540269145604877486775318516032913341127700936415630922300151505450650194620495900045287788426136768893292115786450743469031721760521301327000202677969846886689013858479022587534105566534256145508944181223119860037396262114214426326818409516118624925515667593368767939293353672483599736919868582054175170126174368715754233180184366125904456075512625283375612476312363956628704818500478670435760664345952849195948920676812677964360335172833938791972147219996992896140746071624323943763025531676611604099378994122115359323519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7327c8af69fac637220cf37dd53ba2c6525747ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tequila.epfl.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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