www.cabmm.uzh.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:1d:24:a8:81:0c:d1:00:75:26:b2:99:a9:ef:27:d1:2d:ef was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.cabmm.uzh.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:1d:24:a8:81:0c:d1:00:75:26:b2:99:a9:ef:27:d1:2d:ef
Serial Number (int): 271253773567154705944295734435158359617007
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 59:61:6b:66:97:95:f7:2a:da:92:13:60:a2:a1:9b:9f:17:96:d4:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 59:96:9d:b7:87:20:e6:94:7d:2c:85:17:57:d0:c5:f5:77:d6:10:85
Fingerprint (sha256): 00:aa:c3:ce:e0:88:ec:0f:16:58:2c:f3:c1:29:c4:ac:e7:7f:98:66:85:bb:cf:7c:a6:84:be:55:65:0e:bb:f6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.cabmm.uzh.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cabmm.uzh.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cabmm.uzh.ch
www.cabmm.uzh.ch

Other certificates including the domain name uzh.ch

(limited to 100 certificates)
www.msfinance.uzh.ch
www.phonebook.uzh.ch
ikmz-itmanagement.uzh.ch
webstats.uzh.ch
idladmn01.uzh.ch
www.phonogrammarchiv.uzh.ch
www.tiny.uzh.ch
www.medalumni.uzh.ch
www.evobio.uzh.ch
kitt.cl.uzh.ch
www.weiterbildung.uzh.ch
newsletter.uzh.ch
www.teachers.uzh.ch
www.rht2020.uzh.ch
geo441.wiki.geo.uzh.ch
www.planet-accounting.uzh.ch
www.zirp.uzh.ch
www.projekt175jahre.uzh.ch
www.rechteck.uzh.ch
mnf-44.uzh.ch
www.chir.uzh.ch
www.sciencelab.uzh.ch
www.caslg.uzh.ch
www.inform.uzh.ch
www.tiny.uzh.ch
www.medlead.uzh.ch
www.vertrauen-verstehen.uzh.ch
www.vetanatsammlung.uzh.ch
www.languageattitudes.uzh.ch
www.sustainability.uzh.ch
jupyterhub.anatomy.uzh.ch
www.cabmm.uzh.ch
www.cmme.uzh.ch
www.fvidg.uzh.ch
www.hochschulmedizin.uzh.ch
www.sciencelab.uzh.ch
www.pentateuch.uzh.ch
www.uniability.uzh.ch
www.sprachenzentrum.uzh.ch
www.vetpharm.uzh.ch
www.rd.uzh.ch
www.lsscairo.uzh.ch
www.bmel.uzh.ch
www.vetanatsammlung.uzh.ch
www.cees.uzh.ch
www.fintech.uzh.ch
www.gschmois.uzh.ch
www.vetbiblio.uzh.ch
idsmtp01.uzh.ch
ptl12.math.uzh.ch
www.zmb.uzh.ch
www.alumni.uzh.ch
www.sustainability.uzh.ch
www.econ.uzh.ch
www.linca.uzh.ch
www.tinnitus.uzh.ch
www.kjpd.uzh.ch
www.vetcom.uzh.ch
www.crpp-pain.uzh.ch
idsearch01.uzh.ch
demo.olat.uzh.ch
www.sozpsy.uzh.ch
intranet.csg.uzh.ch
wiki.icu.uzh.ch
zzm-kurs.uzh.ch
ldap.s3it.uzh.ch
www.comparativelinguistics.uzh.ch
www.agenda.uzh.ch
www.pa-bvk.uzh.ch
www.uniterm.uzh.ch
winterweek.icu.uzh.ch
www.oec.uzh.ch
getit.wiki.geo.uzh.ch
www.zhm.uzh.ch
www.ori.uzh.ch
www.imcr.uzh.ch
www.to2.uzh.ch
www.seon.uzh.ch
idltrav02.uzh.ch
www.comparativelinguistics.uzh.ch
www.finreg.uzh.ch
user.math.uzh.ch
www.ssn.uzh.ch
www.paracelsus.uzh.ch
www.blockchain.uzh.ch
www.methodenberatung.uzh.ch
fgcz-transfer.uzh.ch
www.psycholinguistics.uzh.ch
www.immunology.uzh.ch
www.webroot.uzh.ch
www.philosophie.uzh.ch
econgit.uzh.ch
www.rww.uzh.ch
www.chir.uzh.ch
www.ib.uzh.ch
www.uniabilitych.uzh.ch
www.unipublic.uzh.ch
www.global.uzh.ch
sdesk.uzh.ch
idhopep02.uzh.ch

Certificate

The complete raw certificate details for www.cabmm.uzh.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271253773567154705944295734435158359617007
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 12:12:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 12:12:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cabmm.uzh.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 646255267830726892039026698750577405524234918863115037196569888910599249455703979831805700087473287771196351104016886529995070529941535326543257991038472750420158748719045748172741600331835966917571212832130861667326705845476091782012139720700376840072632865087886911149830854841566565365632093498605901678706637150063911170007585360402673142419658529252964802148706853757854077391306085266493692114184539826463304119606643990459403440062390098840547473120502458789264496892529177028337647429382627244132365780785649192738635742220372464982366158497986569885908909941801863021463442004445781850194644870653183097863785366500481809938500885186643027216998297499344193941475901857333918423460008236522898795893971983924814551283509588630097545058187119583016723383209440982516325408498967091484060850802665612150329339144930162606117889815311621997212563608349466157817517880827472782013837427771276412187389100001630724247578182117933449045650757587257303807870428041897024232959016582685197188716255493283179886542722872496707142113860925667513713270662691010643184935383871384071190026994407546925633960459037219782543031427077560312693391281407083355644785447182942248820150589825926779270399303981412194307027358492770098807995553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59616b669795f72ada921360a2a19b9f1796d466
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabmm.uzh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cabmm.uzh.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f103c18f30000040300483046022100a0551cdd646596d6acfdc82a49a885b8c49c69df60cd4e8eb13e01f9e904a80b022100f132e4ed2f490024b103729cb2bbcdd572e561b8aa8a82e8c0a26f9a7e50a8d2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f103c18ec000004030047304502201b4379f0da554e474aaaf4a93bd8ae9470564999277bca68981c34f1f5536b37022100d2003d9f6c2c4086c42db239e35d646cfd75dbe393498aa1675ffaec1dd177f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0034d6c7b17ca8fa7454952a9a5e9079717347825a61544a9449b5297c5a6a3ea2408de7eb47c24438c19738a948c8c8ee8f18b45b6b76c953194d7f7c165d8fa154a11f96411ab7987b458f69383012a28b79d1f0c6e4889b832e066d9e503abfd3f82f41ffd8c7a47d8351205e1d79d05d86130e3d714f64f7dfccb05889e3c0e2dee9261a07547cdd5da75e86c67ba5145c80264a9b7a14a23668f507466ca686b4f5e229f904cda93d4ea42d74aa96f79a415aefcaa647532f47ec4e67cc3630007643ae8aa1e560ef5e0cde746654ed437eeb9111c31fbe74cf9246b7846be6c0fc36df285ef5e03a29bf534c6d59029267ed0231d872dc3a108111aca727