vico.switch.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:74:0e:ab:39:ea:be:8f:c4:cf:4e:59:c1:fd:5d:82:0a:d1 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vico.switch.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:74:0e:ab:39:ea:be:8f:c4:cf:4e:59:c1:fd:5d:82:0a:d1
Serial Number (int): 300829110607509113373517567022921783839441
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:7a:f0:17:04:0e:63:b0:a6:13:07:ce:46:c5:a6:ba:b3:cc:25:e2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:e4:2c:eb:b8:f7:42:b1:e7:93:14:78:56:71:5f:97:a9:ef:9a:74
Fingerprint (sha256): 00:c1:cf:2f:69:cc:6c:90:3c:8a:d6:48:87:a7:c1:20:0c:9a:57:3a:16:a9:7b:16:39:f5:78:c3:2b:5d:53:7b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate vico.switch.ch

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vico.switch.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.vico.switch.ch
api.vico.switch.ch
image.vico.switch.ch
media.vico.switch.ch
vico.switch.ch

Other certificates including the domain name switch.ch

(limited to 100 certificates)
hsr.meet.switch.ch
point.switch.ch
wiki.smap.switch.ch
discourse.toolbox.switch.ch
collab-fms-test.switch.ch
kelimutu.switch.ch
tls.automattic.com
vico.switch.ch
zeus.switch.ch
parma.switch.ch
fl-0-51.zhdk.cloud.switch.ch
ssad.events.switch.ch
placement.api.s2.scloud.switch.ch
evct.ssl.switch.ch
unibas.meet.switch.ch
grafana.int.os-ls.kaas.switch.ch
*.s3-zh.lts.switch.ch
tls.automattic.com
zhaw.meet.switch.ch
neutron.api.s2.scloud.switch.ch
testsp.tw.switch.ch
portal-dev.switch.ch
landingpage.rpz.switch.ch
trust.aviareto.aero
mail.switch.ch
player.cast.switch.ch
test.toolbox.switch.ch
domain-pulse.at
intern.meet.switch.ch
zeus.switch.ch
influxdb.cast-test.switch.ch
glance.api.unil.cloud.switch.ch
producer.cast.switch.ch
filesender.switch.ch
staging.groupie.lard.switch.ch
unili.meet.switch.ch
backend.www.switch.ch
vcregister.switch.ch
kava-admin.cast.switch.ch
worker3.oc-test.switch.ch
alphubel.switch.ch
drive-backup.switch.ch
engines-admin.scloud.switch.ch
*.os.zhdk.cloud.switch.ch
www-test.switch.ch
monitor.switch.ch
wayf.switch.ch
teramac.switch.ch
tls.automattic.com
node21.webauthn.eduid.ch
forge.switch.ch
cast-ng.switch.ch
www.switch.ch
test.id.switch.ch
os.unil.cloud.switch.ch
wayf-test.switch.ch
aai-logon.switch.ch
tls.automattic.com
landingpage.mw.rpz.switch.ch
contracts-test.switch.ch
driveonlyoffice.switch.ch
portfolio.switch.ch
fl-6-178.zhdk.cloud.switch.ch
octavia.api.s1.scloud.switch.ch
cloud-id.switch.ch
portal-dev.switch.ch
status.dilercloud.com
player.cast.switch.ch
bonseyes.zhdk.cloud.switch.ch
cloud-id.switch.ch
tools.aai.switch.ch
download.cast.switch.ch
tools.switch.ch
www-dev.switch.ch
admin.oc-test.switch.ch
www-dev.switch.ch
wayf-test.switch.ch
test.idph.switch.ch
bfh.meet.switch.ch
urlanalyzer-staging-backend.misc01.k8s.cert.switch.ch
password.switch.ch
idp-monitor.aai.switch.ch
saqcnfbe.events.switch.ch
cr.gitlab.switch.ch
*.lts.switch.ch
kava-admin.cast.switch.ch
unibe.meet.switch.ch
domain-pulse.at
bonseyes.zhdk.cloud.switch.ch
wiki.smap.switch.ch
producer.cast.switch.ch
tls.automattic.com
switchnovember.events.switch.ch
*.sandstorm.cloud.switch.ch
portfolio.switch.ch
metadata-test.aai.switch.ch
kelimutu.switch.ch
presentation.cast.switch.ch
mirror.cloud.switch.ch
srp.switch.ch

Certificate

The complete raw certificate details for vico.switch.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxX4evw+AUVz7zNURyIQM
qxBfTe9kfGDSpes8Td9VUx/VvY51n5ipO8vJM0KydkBBAEa9jPNEx2zpA8kqTszO
WeT0iVXKb6jOhfzQ5Eja/n5VjlFmQqzrWn8brQsLpmfssmevy6bQqKn9iiMRVDo7
wODXmfW3NwdzVlombV5GT5eqma2eEylnRsdhKbJEAG5F8HR7L6ZI62KyDGfoOjtC
f0Ln78CQnj46q0cp0FM5gdvK1ofDWYPkNTuDkO0SMHkZekT9XGD5RFF0u/ceBUeC
vqyxaravJw4jKAVVo3ptpRtGJUF/WguwdVD73fxR+qdqaPAeDBGSisCSq7rPvH/q
wpj17kHF5+vW1ySougPQDtAmXqosnza7YEwEFvCIm4UellzHdXPAZcK1ctu5/CSJ
xK/7PLXKImbEnTDgy69OxnoDT0NlAQIB0oFCJ9eaXCru1vaB8cwcLWGlKnccmA2h
bsvLFL+PGW7oDq8bECaHbHPz52xoycQU859YZ3KFOEUbNgWnimNi/XMoDeowXLj6
UzPTO/PjFdXAs6pYbOZRItFLgrxB6r4+CmW1azdQlXz0Sef7QoEbYBtBQTgjaECf
Awf79BqDLaiOtzGDOH3L4+e2LjLDNdMhs9F1/Nn+gHWjR7L0WPu2DMIgfsXOSJOp
RHCid76O1FcxlAc213oNZocCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300829110607509113373517567022921783839441
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-26 16:07:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 16:07:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vico.switch.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805699745186921773286297405401136596327471802752642605702177165163820796824366812756361624445090697922670321617830542919800640252491796156233779257766381228942512222940314255720795385226870690053157154732465956039732361985214067451318173628138986123994811815887757597568436607629661593848244937178418228688491715907441779344599678559572612089356350155152065452777086497535759851302409518447864181900156020378135495312912204784100789637096032937289437739227379595093596932309451989103228276438161422132230164431692290653227332976007075765987587503277768047530209225214924622384380029441009234340448350688741656133492641356737209718366841380863577336850989055074160785722605868229058060427832718632030670737926427520799709557544943542183779405012051395602604080520296377742162739518450210850943161470477061365287195250211672521479594773914442521702388751330895419059085013450714938723466646873026758406898400278776442191189157368075387995258297896316365850547704562792364005799582186173538784431363796508569795903209160568330606253341010854491983105768798576002807750788588137753588422717643659715998789173177447595960295355193875703554177906418234937241574526266502312275533768471418379204173944392029964719357332414559324339360851591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b17af017040e63b0a61307ce46c5a6bab3cc25e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vico.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.vico.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.vico.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.vico.switch.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vico.switch.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187be88fda50000040300483046022100a287f6150db6f1a545b329a2a5437f99f99640364e6a148e189be64c6c90b69f022100b441fb08b7bf73e0c4b7a16824e1ddfc56b8177a7b9e9e50d4bd25e70fcbeb720076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187be88fdc20000040300473045022100e9cb955bc11be775117c0100defb257d124e5968ceb711bc7e708fccaa05d158022011d5e28301d98c4324ceb29020b3375e40b3bf1aed4beb99b5caa1c8db7f02e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008f18b4afd82775bd5e7f36a036f3185b58c5e7fe761ac4538b9db3d575b56f17e53ec8c2e36b466278910162047dd3b26241138ce9ff406558a4f631bbf1e6c57e44d19b96e3dd3e19fd9bd73b1454f2c659800af822d15f2c8aeee936f3aefedc135a7f94f09a0fae671e7346b9bb832bbbc8cbf414c086e684834ef01b3f58fa37e901497beeea11e1ba1e79d81322b97e1557d8dab0e29b11996ba9bbf15630c0904d376d71a3b04c9f6cadfe09903d4a9481d0fa2446f7bad2b93a1348ed0b366edec6801e6fe1a44cffae20bb57d13f7cb8dc9fac3af2ac46d5179f4f4eca4f108af76412a321ce698d62df5ae351d1606180b1b2ab774b944600b66233