www.sustainability.uzh.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:73:02:45:a6:6b:ea:fd:43:37:2b:70:a4:10:5f:de:aa was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sustainability.uzh.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:73:02:45:a6:6b:ea:fd:43:37:2b:70:a4:10:5f:de:aa
Serial Number (int): 331928180764695520881853877571272786828970
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 31:d6:6f:fb:90:b6:df:d5:f2:6a:22:f6:48:eb:b0:61:c4:02:60:83
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:36:8d:dd:9e:4e:c4:0d:34:34:70:54:79:6d:df:d0:0a:4d:c7:1f
Fingerprint (sha256): 01:44:ab:56:58:ca:2c:86:6e:05:a2:f7:71:3b:c7:f6:9a:f1:fa:f1:1e:38:96:97:85:9b:c4:15:b0:da:f9:76

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sustainability.uzh.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sustainability.uzh.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sustainability.uzh.ch
www.sustainability.uzh.ch

Other certificates including the domain name uzh.ch

(limited to 100 certificates)
www.msfinance.uzh.ch
www.phonebook.uzh.ch
ikmz-itmanagement.uzh.ch
webstats.uzh.ch
idladmn01.uzh.ch
www.phonogrammarchiv.uzh.ch
www.tiny.uzh.ch
www.medalumni.uzh.ch
www.evobio.uzh.ch
kitt.cl.uzh.ch
www.weiterbildung.uzh.ch
newsletter.uzh.ch
www.teachers.uzh.ch
www.rht2020.uzh.ch
geo441.wiki.geo.uzh.ch
www.planet-accounting.uzh.ch
www.zirp.uzh.ch
www.projekt175jahre.uzh.ch
www.rechteck.uzh.ch
mnf-44.uzh.ch
www.chir.uzh.ch
www.sciencelab.uzh.ch
www.caslg.uzh.ch
www.inform.uzh.ch
www.tiny.uzh.ch
www.medlead.uzh.ch
www.vertrauen-verstehen.uzh.ch
www.vetanatsammlung.uzh.ch
www.languageattitudes.uzh.ch
www.sustainability.uzh.ch
jupyterhub.anatomy.uzh.ch
www.cabmm.uzh.ch
www.cmme.uzh.ch
www.fvidg.uzh.ch
www.hochschulmedizin.uzh.ch
www.sciencelab.uzh.ch
www.pentateuch.uzh.ch
www.uniability.uzh.ch
www.sprachenzentrum.uzh.ch
www.vetpharm.uzh.ch
www.rd.uzh.ch
www.lsscairo.uzh.ch
www.bmel.uzh.ch
www.vetanatsammlung.uzh.ch
www.cees.uzh.ch
www.fintech.uzh.ch
www.gschmois.uzh.ch
www.vetbiblio.uzh.ch
idsmtp01.uzh.ch
ptl12.math.uzh.ch
www.zmb.uzh.ch
www.alumni.uzh.ch
www.sustainability.uzh.ch
www.econ.uzh.ch
www.linca.uzh.ch
www.tinnitus.uzh.ch
www.kjpd.uzh.ch
www.vetcom.uzh.ch
www.crpp-pain.uzh.ch
idsearch01.uzh.ch
demo.olat.uzh.ch
www.sozpsy.uzh.ch
intranet.csg.uzh.ch
wiki.icu.uzh.ch
zzm-kurs.uzh.ch
ldap.s3it.uzh.ch
www.comparativelinguistics.uzh.ch
www.agenda.uzh.ch
www.pa-bvk.uzh.ch
www.uniterm.uzh.ch
winterweek.icu.uzh.ch
www.oec.uzh.ch
getit.wiki.geo.uzh.ch
www.zhm.uzh.ch
www.ori.uzh.ch
www.imcr.uzh.ch
www.to2.uzh.ch
www.seon.uzh.ch
idltrav02.uzh.ch
www.comparativelinguistics.uzh.ch
www.finreg.uzh.ch
user.math.uzh.ch
www.ssn.uzh.ch
www.paracelsus.uzh.ch
www.blockchain.uzh.ch
www.methodenberatung.uzh.ch
fgcz-transfer.uzh.ch
www.psycholinguistics.uzh.ch
www.immunology.uzh.ch
www.webroot.uzh.ch
www.philosophie.uzh.ch
econgit.uzh.ch
www.rww.uzh.ch
www.chir.uzh.ch
www.ib.uzh.ch
www.uniabilitych.uzh.ch
www.unipublic.uzh.ch
www.global.uzh.ch
sdesk.uzh.ch
idhopep02.uzh.ch

Certificate

The complete raw certificate details for www.sustainability.uzh.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331928180764695520881853877571272786828970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 17:18:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-07 17:18:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sustainability.uzh.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786586776814447750715995617087003033792209983011650325017413604832657588942212145277272757734642660293173309725987910951766783770935241445183821561825337155283725698014247244315789033923111352907722335367214033999546350414342220784437099681768682291537094401465388663894201962459773275417573405734644750802023788489744714310679861477298251285854199832066326742511539934275473720751255531919515966998235750411709602153996913016593273976828931480126294895953008619989685034705951750009655024675187040776560875478592741270136767700991156472398056705752708534143998753461563533767001165477230777553878409272071963141128548812635949442984756545900013899973911900397806739305631132411188105015495379576683359541568517802563501069873394665097112390744983202574228648947878345267398911006212738296389454333411239033323065771596030172312726187609210208122599241268532904378636345446275183255265966323378355914930674589363961821044897527860747625691910535245803033650291242214676542401802090478564214704374998274817777110249154573111385043871969683212751239500984927636670062660812956178808634597985410192783407340914826424907834874401399239638683746215437880551252144204372398731849207533239053768332489784662775643310955554684559276176714271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31d66ffb90b6dfd5f26a22f648ebb061c4026083
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainability.uzh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sustainability.uzh.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170c0856c6500000403004630440220343b8b8d8216d77f8508d6ccd2c30bb6d3392019caeaa30458c60131fe726e5902207238f35d6f9232c37295809c59bfac4ce3c9e15031461fbbcbfc0ecf795ce43a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170c0856d760000040300473045022100e79833a70d47bc27eedda3b55ba126b850e39aedc6fa17491e3308b14d2160b9022023034d60ba462d3b1f6dae9bd7028870536a3eabdc20b7e0f58515112220eb67
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006f0e2b0c3a860f79a4bc1adaf280ccbbb97169a67e88d0510c18f9c22df21c6cce6474b65a0d3f59cc566d56550f5b4452a9c902cebba7fcc04583ccfba7d80135d8afebc9b582a7fe3a31271849c16b04921f0e8615d6290cd8ce428632acfb983f56ce03a8c18332a904a5be08c1837b43d268abe9de55a70f572b9b05c13f1a6b18d6532aa5dc6a7ae0b7c25060b25c4a18ba45272cfbd281b7355bc8ebd8a5ada596308058836c4eacb7f10486da892400a734e89f8c7511b5a10ee3acc6b8c26c9bf5a55282017cc17f93de3f885c0b3f3b2ca8957a08dd83ac60d3532b478fce55a71ef1659136ecd233484adefb3b28eda789704af63a82ac19c4afad