www.lsscairo.uzh.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1f:d0:2b:f0:a3:ea:dd:77:bb:d5:2b:ff:9d:cf:ef:37:1e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lsscairo.uzh.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1f:d0:2b:f0:a3:ea:dd:77:bb:d5:2b:ff:9d:cf:ef:37:1e
Serial Number (int): 272162318742483194402945161627359257769758
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:ca:61:15:46:70:19:e2:87:b1:7e:49:07:8a:8a:5b:3e:09:bc:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 41:24:74:32:ca:03:90:27:ef:bb:20:2a:e7:6d:de:d0:31:ff:28:80
Fingerprint (sha256): 00:f1:91:7f:81:19:0e:f1:88:02:98:18:8d:37:45:39:a9:9a:95:74:66:ec:68:08:a7:3e:12:83:b0:23:3c:f9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lsscairo.uzh.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lsscairo.uzh.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lsscairo.uzh.ch

Other certificates including the domain name uzh.ch

(limited to 100 certificates)
www.msfinance.uzh.ch
www.phonebook.uzh.ch
ikmz-itmanagement.uzh.ch
webstats.uzh.ch
idladmn01.uzh.ch
www.phonogrammarchiv.uzh.ch
www.tiny.uzh.ch
www.medalumni.uzh.ch
www.evobio.uzh.ch
kitt.cl.uzh.ch
www.weiterbildung.uzh.ch
newsletter.uzh.ch
www.teachers.uzh.ch
www.rht2020.uzh.ch
geo441.wiki.geo.uzh.ch
www.planet-accounting.uzh.ch
www.zirp.uzh.ch
www.projekt175jahre.uzh.ch
www.rechteck.uzh.ch
mnf-44.uzh.ch
www.chir.uzh.ch
www.sciencelab.uzh.ch
www.caslg.uzh.ch
www.inform.uzh.ch
www.tiny.uzh.ch
www.medlead.uzh.ch
www.vertrauen-verstehen.uzh.ch
www.vetanatsammlung.uzh.ch
www.languageattitudes.uzh.ch
www.sustainability.uzh.ch
jupyterhub.anatomy.uzh.ch
www.cabmm.uzh.ch
www.cmme.uzh.ch
www.fvidg.uzh.ch
www.hochschulmedizin.uzh.ch
www.sciencelab.uzh.ch
www.pentateuch.uzh.ch
www.uniability.uzh.ch
www.sprachenzentrum.uzh.ch
www.vetpharm.uzh.ch
www.rd.uzh.ch
www.lsscairo.uzh.ch
www.bmel.uzh.ch
www.vetanatsammlung.uzh.ch
www.cees.uzh.ch
www.fintech.uzh.ch
www.gschmois.uzh.ch
www.vetbiblio.uzh.ch
idsmtp01.uzh.ch
ptl12.math.uzh.ch
www.zmb.uzh.ch
www.alumni.uzh.ch
www.sustainability.uzh.ch
www.econ.uzh.ch
www.linca.uzh.ch
www.tinnitus.uzh.ch
www.kjpd.uzh.ch
www.vetcom.uzh.ch
www.crpp-pain.uzh.ch
idsearch01.uzh.ch
demo.olat.uzh.ch
www.sozpsy.uzh.ch
intranet.csg.uzh.ch
wiki.icu.uzh.ch
zzm-kurs.uzh.ch
ldap.s3it.uzh.ch
www.comparativelinguistics.uzh.ch
www.agenda.uzh.ch
www.pa-bvk.uzh.ch
www.uniterm.uzh.ch
winterweek.icu.uzh.ch
www.oec.uzh.ch
getit.wiki.geo.uzh.ch
www.zhm.uzh.ch
www.ori.uzh.ch
www.imcr.uzh.ch
www.to2.uzh.ch
www.seon.uzh.ch
idltrav02.uzh.ch
www.comparativelinguistics.uzh.ch
www.finreg.uzh.ch
user.math.uzh.ch
www.ssn.uzh.ch
www.paracelsus.uzh.ch
www.blockchain.uzh.ch
www.methodenberatung.uzh.ch
fgcz-transfer.uzh.ch
www.psycholinguistics.uzh.ch
www.immunology.uzh.ch
www.webroot.uzh.ch
www.philosophie.uzh.ch
econgit.uzh.ch
www.rww.uzh.ch
www.chir.uzh.ch
www.ib.uzh.ch
www.uniabilitych.uzh.ch
www.unipublic.uzh.ch
www.global.uzh.ch
sdesk.uzh.ch
idhopep02.uzh.ch

Certificate

The complete raw certificate details for www.lsscairo.uzh.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272162318742483194402945161627359257769758
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-16 23:09:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-14 23:09:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lsscairo.uzh.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 620395454025228444497560938640181621568603491416694051667504133709813952898336286328112547533357429433107294373800199615629535577546615760050670303923015698885997612405000112673904391658620651217478351168004255201023933885673246824628158896776264127096174043423866631328417487409716295696657884350273639090317992310765492737636354338267736789463091000998485246750983558593291819264377765095482197932868736144204855731890344938744080865840200925088863055354292907545349122014399234530033627549723257540838329048635517128311432099153219019014499291489008986178556936148766831302253104483366389930511580055444884654214516563504467681853855258246444817831086391015238089325517038210369078079373281313970942635376113912499633457211808391319936291996291002155084731753670969875713680813302003187946690795417524752857479121356312400117717929638853789328032476570625334377952033365288109914810358340006840203497939959286759082343711846573419091952989066420786403817126648317219681053361583258229258853438611494589585282655522579196962464479707782719061640630376682624473421521020504472539059176616985830665414871115132907352621941356179439874743370632722083628837369305760820592705326816605409583052818166333519505221390946747302601289686423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1ca6115467019e287b17e49078a8a5b3e09bcfd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsscairo.uzh.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001667f5b58440000040300483046022100b5f9db7d173e0ffac90dee855866e105153e122028f92e2433a8012a296a804d022100e1b4c7c745cdbf868c222b1d210fb412aa3d88316426c4b5c98e83eddb0278e5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001667f5b5a2200000403004730450221008da0769783663670e021911910f3bb56469764c6129e664e4c783ffa7e6cad8b02201c9863da060dbac6349c4fcaafa4067a125d77e3e4d34e03c35471c73bd21215
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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