fl-0-51.zhdk.cloud.switch.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:02:73:2a:58:27:a1:94:13:c3:d0:4c:e3:d7:39:e1:72:70 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fl-0-51.zhdk.cloud.switch.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:73:2a:58:27:a1:94:13:c3:d0:4c:e3:d7:39:e1:72:70
Serial Number (int): 262170503613097890215285717700996732383856
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6e:65:9d:7c:e0:90:36:bd:30:ea:8d:ae:53:49:a2:84:32:d7:cb:b1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d0:1d:5a:d3:90:ef:42:17:19:30:f7:14:d5:40:e6:ac:41:c7:9c:5f
Fingerprint (sha256): 01:61:f5:8d:4c:21:d5:fd:78:23:1c:75:ed:c6:a0:5e:f9:bf:7c:7a:fd:30:fc:44:94:d7:49:c5:f3:4b:06:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate fl-0-51.zhdk.cloud.switch.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fl-0-51.zhdk.cloud.switch.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fl-0-51.zhdk.cloud.switch.ch

Other certificates including the domain name switch.ch

(limited to 100 certificates)
hsr.meet.switch.ch
point.switch.ch
wiki.smap.switch.ch
discourse.toolbox.switch.ch
collab-fms-test.switch.ch
kelimutu.switch.ch
tls.automattic.com
vico.switch.ch
zeus.switch.ch
parma.switch.ch
fl-0-51.zhdk.cloud.switch.ch
ssad.events.switch.ch
placement.api.s2.scloud.switch.ch
evct.ssl.switch.ch
unibas.meet.switch.ch
grafana.int.os-ls.kaas.switch.ch
*.s3-zh.lts.switch.ch
tls.automattic.com
zhaw.meet.switch.ch
neutron.api.s2.scloud.switch.ch
testsp.tw.switch.ch
portal-dev.switch.ch
landingpage.rpz.switch.ch
trust.aviareto.aero
mail.switch.ch
player.cast.switch.ch
test.toolbox.switch.ch
domain-pulse.at
intern.meet.switch.ch
zeus.switch.ch
influxdb.cast-test.switch.ch
glance.api.unil.cloud.switch.ch
producer.cast.switch.ch
filesender.switch.ch
staging.groupie.lard.switch.ch
unili.meet.switch.ch
backend.www.switch.ch
vcregister.switch.ch
kava-admin.cast.switch.ch
worker3.oc-test.switch.ch
alphubel.switch.ch
drive-backup.switch.ch
engines-admin.scloud.switch.ch
*.os.zhdk.cloud.switch.ch
www-test.switch.ch
monitor.switch.ch
wayf.switch.ch
teramac.switch.ch
tls.automattic.com
node21.webauthn.eduid.ch
forge.switch.ch
cast-ng.switch.ch
www.switch.ch
test.id.switch.ch
os.unil.cloud.switch.ch
wayf-test.switch.ch
aai-logon.switch.ch
tls.automattic.com
landingpage.mw.rpz.switch.ch
contracts-test.switch.ch
driveonlyoffice.switch.ch
portfolio.switch.ch
fl-6-178.zhdk.cloud.switch.ch
octavia.api.s1.scloud.switch.ch
cloud-id.switch.ch
portal-dev.switch.ch
status.dilercloud.com
player.cast.switch.ch
bonseyes.zhdk.cloud.switch.ch
cloud-id.switch.ch
tools.aai.switch.ch
download.cast.switch.ch
tools.switch.ch
www-dev.switch.ch
admin.oc-test.switch.ch
www-dev.switch.ch
wayf-test.switch.ch
test.idph.switch.ch
bfh.meet.switch.ch
urlanalyzer-staging-backend.misc01.k8s.cert.switch.ch
password.switch.ch
idp-monitor.aai.switch.ch
saqcnfbe.events.switch.ch
cr.gitlab.switch.ch
*.lts.switch.ch
kava-admin.cast.switch.ch
unibe.meet.switch.ch
domain-pulse.at
bonseyes.zhdk.cloud.switch.ch
wiki.smap.switch.ch
producer.cast.switch.ch
tls.automattic.com
switchnovember.events.switch.ch
*.sandstorm.cloud.switch.ch
portfolio.switch.ch
metadata-test.aai.switch.ch
kelimutu.switch.ch
presentation.cast.switch.ch
mirror.cloud.switch.ch
srp.switch.ch

Certificate

The complete raw certificate details for fl-0-51.zhdk.cloud.switch.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262170503613097890215285717700996732383856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 07:07:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 07:07:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fl-0-51.zhdk.cloud.switch.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 707332554284794985103777886884695792329931341514607765990480805295768794010249652398205569722087670562572797895914339084799451445482511121688072980006370961809628002890661092586502670621433143073694294173771521359336544935984376965485569183313165420823565737018947464566945257893596439460921911147199277343899800694561630951851104044445128995476437835644422223283172029917818977090784642671390842611358505228584661264866989264679112042899319631856992322345695843601341869382790223859975651345375145441536896073349296253905093474502137236015046146344292414143113021065009906648869702012485666655382602531684467325874665696339830872657017461814371111443925954388797175028947787836099232394753677812920256024292479195049218995852758076710316679172367569898536891531327141997207755085988361426904036772350890069648147643434767794384130730939914010092084636612755947088778258528008102890414625075605929900484568467899436952882766594454520815775584375002299614332753630493919111523491974728735256997681316407138718341689240652315781166921565873717595549910476984799220254999425858273225490623405804711667988674656373356581271767984414373571250403371120375840035493952383452394344361061440474996165967220036348878185393408849347649349045117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e659d7ce09036bd30ea8dae5349a28432d7cbb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fl-0-51.zhdk.cloud.switch.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016df7a827ac0000040300473045022100de4855d60f1d38c8f491c53d81decc8736cffedcb5b63d74c2238bb4696e6253022060f9ddd1b61edaad01274446c2114aea15158313be659546e15354d3fdc9d434007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016df7a827a2000004030047304502205d54902dce0a2d08ed347491f77cd92a9b52a368e28196baa832db88881c557f022100b2d560f54cb21beac4953aeb0ce823ab8161d59aff08eaabe4ece67fb2a1d41c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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