www.cmme.uzh.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:01:50:9c:fb:31:db:01:20:59:44:42:d3:64:cb:47:a6:ca was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cmme.uzh.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:50:9c:fb:31:db:01:20:59:44:42:d3:64:cb:47:a6:ca
Serial Number (int): 261784293495009172164884757975364868220618
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:17:14:6c:78:89:72:41:ea:fe:98:a2:8c:96:a7:7b:ce:c9:43:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 85:e3:1c:99:71:30:d2:5b:45:5d:c3:2c:9f:60:05:c7:6c:24:59:5b
Fingerprint (sha256): 00:b2:a5:5a:96:72:90:68:37:b6:43:ba:b7:d9:c6:18:ed:e0:86:6f:69:7c:42:aa:71:fa:2f:b4:25:de:fc:d1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cmme.uzh.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cmme.uzh.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cmme.uzh.ch

Other certificates including the domain name uzh.ch

(limited to 100 certificates)
www.msfinance.uzh.ch
www.phonebook.uzh.ch
ikmz-itmanagement.uzh.ch
webstats.uzh.ch
idladmn01.uzh.ch
www.phonogrammarchiv.uzh.ch
www.tiny.uzh.ch
www.medalumni.uzh.ch
www.evobio.uzh.ch
kitt.cl.uzh.ch
www.weiterbildung.uzh.ch
newsletter.uzh.ch
www.teachers.uzh.ch
www.rht2020.uzh.ch
geo441.wiki.geo.uzh.ch
www.planet-accounting.uzh.ch
www.zirp.uzh.ch
www.projekt175jahre.uzh.ch
www.rechteck.uzh.ch
mnf-44.uzh.ch
www.chir.uzh.ch
www.sciencelab.uzh.ch
www.caslg.uzh.ch
www.inform.uzh.ch
www.tiny.uzh.ch
www.medlead.uzh.ch
www.vertrauen-verstehen.uzh.ch
www.vetanatsammlung.uzh.ch
www.languageattitudes.uzh.ch
www.sustainability.uzh.ch
jupyterhub.anatomy.uzh.ch
www.cabmm.uzh.ch
www.cmme.uzh.ch
www.fvidg.uzh.ch
www.hochschulmedizin.uzh.ch
www.sciencelab.uzh.ch
www.pentateuch.uzh.ch
www.uniability.uzh.ch
www.sprachenzentrum.uzh.ch
www.vetpharm.uzh.ch
www.rd.uzh.ch
www.lsscairo.uzh.ch
www.bmel.uzh.ch
www.vetanatsammlung.uzh.ch
www.cees.uzh.ch
www.fintech.uzh.ch
www.gschmois.uzh.ch
www.vetbiblio.uzh.ch
idsmtp01.uzh.ch
ptl12.math.uzh.ch
www.zmb.uzh.ch
www.alumni.uzh.ch
www.sustainability.uzh.ch
www.econ.uzh.ch
www.linca.uzh.ch
www.tinnitus.uzh.ch
www.kjpd.uzh.ch
www.vetcom.uzh.ch
www.crpp-pain.uzh.ch
idsearch01.uzh.ch
demo.olat.uzh.ch
www.sozpsy.uzh.ch
intranet.csg.uzh.ch
wiki.icu.uzh.ch
zzm-kurs.uzh.ch
ldap.s3it.uzh.ch
www.comparativelinguistics.uzh.ch
www.agenda.uzh.ch
www.pa-bvk.uzh.ch
www.uniterm.uzh.ch
winterweek.icu.uzh.ch
www.oec.uzh.ch
getit.wiki.geo.uzh.ch
www.zhm.uzh.ch
www.ori.uzh.ch
www.imcr.uzh.ch
www.to2.uzh.ch
www.seon.uzh.ch
idltrav02.uzh.ch
www.comparativelinguistics.uzh.ch
www.finreg.uzh.ch
user.math.uzh.ch
www.ssn.uzh.ch
www.paracelsus.uzh.ch
www.blockchain.uzh.ch
www.methodenberatung.uzh.ch
fgcz-transfer.uzh.ch
www.psycholinguistics.uzh.ch
www.immunology.uzh.ch
www.webroot.uzh.ch
www.philosophie.uzh.ch
econgit.uzh.ch
www.rww.uzh.ch
www.chir.uzh.ch
www.ib.uzh.ch
www.uniabilitych.uzh.ch
www.unipublic.uzh.ch
www.global.uzh.ch
sdesk.uzh.ch
idhopep02.uzh.ch

Certificate

The complete raw certificate details for www.cmme.uzh.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwSuWfTbzP20DOPM5nUfm
Uh8E0i2tA2cflz5b5/rAPixnfhW6KGO3u0VW6CbhwGuMfsG8g0DKyJa87MepokV6
QR7pBjlIiQTyP67tWncfmaZn9Rd/5qc46pXy3Y0Yn3DSHYbxA20oGr7drMg3EvzR
qyDN8G7mkj4xq2drfYpZY97Znl+elEk87kieT/lBlsvTbhUhe177RUkp4/q8TN+g
6g7JXw5nnFqrufvBxF3RJcIVLKQbwjcPY+ITxDK0aGJd4ptDa+Tvh/CCj67thrDq
MUaBlkbY0oMz+lzwmU20F7YM2Od2iCEr3U6Yj0pa34Gp9VGUWxB0e9c0EKyc9Ls8
gApdfZDk75j1rWMF/JTALrdJMWeyzXKjprEFHPbkV6/PQPCtVdg/sVkySmKRW6gn
LXKITWUxpmEkyjReqxmn3BZeXt7GXBfemMAbhybjp2QiEZVncus3e1kJ7GldkHN+
y27QJfnSq2199xDqtYcY1JA8FOL46a6g336Q9L6x0ulyfXMv4wQquh3q88KojSJO
QLpr5iaKY7VHRfzhoa4lrTT6oqKGBUiz84FRbxpVrhp9k+xmZEuNZ2sUjJgNuxpF
WAJn2xFcpV0GabcI4BeWMlqM9px/VKTp0jGsFJOt6xZFE7SO0JCUix/KXLfuMvez
cwdEZUKnvT3mgK/kGSFSekkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261784293495009172164884757975364868220618
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 14:16:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 14:16:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cmme.uzh.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788065925854589620399805029918959438057068676774601222547796621715863708072630186560720533705473093000524933612519548947495881701047242727459046370670614084904401153684424200599978603071067532419979608260597670540733300536858274075712453276385668033286109217106205711237045481086155268486970496126653488756504874077748164758676758766882707016147222650010478532101934636505799784274685084874541073844464351082034406516383047488087845424266497655011765359834791210010816653047469796762165433200637010410212344122842670989543455346235767109918279367801022587327651197694839216351881607354356695881144038210900132216711378795595466129307189976116976279377878558878069437356047136625095853891392046527560997219792287168632763593439459459846471201966060338715062542032813976662260731434200552888626411743739713841828926366457921300520792800570554182664424032608499959496076111005246818241825703706621477269022811744327361886377874046111095843491756164716066360353386436361396244999475254018746941014803219851956598730272241364174798884884415744968507901000226080282983584033379238292779401032855603343134350230488100775382027374691952609697978140551602413077153203350823724562543554188336086763215196915198297727969093360859465658030783049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b417146c78897241eafe98a28c96a77bcec943b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmme.uzh.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c4374466f0000040300463044022027b0989f5028b1508024f0e04296d04829711d902ca8a68bb9671fe3cccfa1cd0220453e79545266c0f0e2ded600f457e557dddce08437b28e91f8ce9f558b53e66700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c437446870000040300473045022100b57437c7d2659ee17ae11dd342ce455263a17058f3d84847774172a7cbc9ee74022056235e9fef7a7c42f1b79caf5ee79c709958cd4852e3ce2dea9deb15fbca1e8a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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