www.oec.uzh.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:7b:44:8a:7d:5d:a7:24:15:da:c4:02:02:5e:05:db:c9:8e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.oec.uzh.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:44:8a:7d:5d:a7:24:15:da:c4:02:02:5e:05:db:c9:8e
Serial Number (int): 303282695509957170222897238655346765711758
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:a9:40:63:51:bf:d8:30:54:79:d6:0a:91:aa:a8:82:c4:9d:ab:db
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c4:4c:73:84:dc:ea:05:d9:60:27:e2:8c:a4:63:47:c7:06:a5:56:40
Fingerprint (sha256): 01:b1:c1:55:bf:df:d7:04:34:6f:fc:d0:4d:47:db:dc:73:fd:9b:de:90:aa:2d:15:7e:f5:d9:8b:87:25:c6:52

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.oec.uzh.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.oec.uzh.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oec.uzh.ch
www.oec.uzh.ch

Other certificates including the domain name uzh.ch

(limited to 100 certificates)
www.msfinance.uzh.ch
www.phonebook.uzh.ch
ikmz-itmanagement.uzh.ch
webstats.uzh.ch
idladmn01.uzh.ch
www.phonogrammarchiv.uzh.ch
www.tiny.uzh.ch
www.medalumni.uzh.ch
www.evobio.uzh.ch
kitt.cl.uzh.ch
www.weiterbildung.uzh.ch
newsletter.uzh.ch
www.teachers.uzh.ch
www.rht2020.uzh.ch
geo441.wiki.geo.uzh.ch
www.planet-accounting.uzh.ch
www.zirp.uzh.ch
www.projekt175jahre.uzh.ch
www.rechteck.uzh.ch
mnf-44.uzh.ch
www.chir.uzh.ch
www.sciencelab.uzh.ch
www.caslg.uzh.ch
www.inform.uzh.ch
www.tiny.uzh.ch
www.medlead.uzh.ch
www.vertrauen-verstehen.uzh.ch
www.vetanatsammlung.uzh.ch
www.languageattitudes.uzh.ch
www.sustainability.uzh.ch
jupyterhub.anatomy.uzh.ch
www.cabmm.uzh.ch
www.cmme.uzh.ch
www.fvidg.uzh.ch
www.hochschulmedizin.uzh.ch
www.sciencelab.uzh.ch
www.pentateuch.uzh.ch
www.uniability.uzh.ch
www.sprachenzentrum.uzh.ch
www.vetpharm.uzh.ch
www.rd.uzh.ch
www.lsscairo.uzh.ch
www.bmel.uzh.ch
www.vetanatsammlung.uzh.ch
www.cees.uzh.ch
www.fintech.uzh.ch
www.gschmois.uzh.ch
www.vetbiblio.uzh.ch
idsmtp01.uzh.ch
ptl12.math.uzh.ch
www.zmb.uzh.ch
www.alumni.uzh.ch
www.sustainability.uzh.ch
www.econ.uzh.ch
www.linca.uzh.ch
www.tinnitus.uzh.ch
www.kjpd.uzh.ch
www.vetcom.uzh.ch
www.crpp-pain.uzh.ch
idsearch01.uzh.ch
demo.olat.uzh.ch
www.sozpsy.uzh.ch
intranet.csg.uzh.ch
wiki.icu.uzh.ch
zzm-kurs.uzh.ch
ldap.s3it.uzh.ch
www.comparativelinguistics.uzh.ch
www.agenda.uzh.ch
www.pa-bvk.uzh.ch
www.uniterm.uzh.ch
winterweek.icu.uzh.ch
www.oec.uzh.ch
getit.wiki.geo.uzh.ch
www.zhm.uzh.ch
www.ori.uzh.ch
www.imcr.uzh.ch
www.to2.uzh.ch
www.seon.uzh.ch
idltrav02.uzh.ch
www.comparativelinguistics.uzh.ch
www.finreg.uzh.ch
user.math.uzh.ch
www.ssn.uzh.ch
www.paracelsus.uzh.ch
www.blockchain.uzh.ch
www.methodenberatung.uzh.ch
fgcz-transfer.uzh.ch
www.psycholinguistics.uzh.ch
www.immunology.uzh.ch
www.webroot.uzh.ch
www.philosophie.uzh.ch
econgit.uzh.ch
www.rww.uzh.ch
www.chir.uzh.ch
www.ib.uzh.ch
www.uniabilitych.uzh.ch
www.unipublic.uzh.ch
www.global.uzh.ch
sdesk.uzh.ch
idhopep02.uzh.ch

Certificate

The complete raw certificate details for www.oec.uzh.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303282695509957170222897238655346765711758
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 12:26:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 12:26:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oec.uzh.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735636796259994431416976663584614699833415676690094232531275860115931644335815419365231936006939984082731043140358477791232391831617697488247857803470183878476091475912076714296290352374755108895849519954217839974268780548291313827675528332678530509839022477405986940354060933295507711631353440657880582527940477058879921001273738383786976723328857936290657916146249529552030614180706853866326562453918013735444298296833127662091771137758818113246537924277222471225171530440611952578990820586630574101313574737186719113199103110000490007304404088696531609145081663909159541416971999542333816681674183730022563302822861518531974671643527437964721873909749365832268088183951114855048444228651794942800299512324541510983583899311422611043879377103333243454017245067117508024569833682360707497048226747734705037727720045806686763405626112791039260892262273033063545300363385754479264769251000423557455148133815345802398755112060529277358917480565852822813668582387876252275069556081849531080476623281082770651557119745249636671266179347364502457714269466517695692557086760599728152963155872966801427932508622541263462471798999089942846733379883669882288865056114766413827232102880589345119932554294620481654922166768402723417976768861013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9a9406351bfd8305479d60a91aaa882c49dabdb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oec.uzh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oec.uzh.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001891beea2660000040300483046022100b36afcaac45b202777eb865a98192671ccb8bbec70bce5ac7e2f9d754077b5d1022100cc097df619de98d26a0f8eacaa08037ea37166c18e14391c1e7997df930e1bf9007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001891beea29200000403004730450220094fbc51e668ae5f11c084f4bd0fdc53413b07f69114062c76f4d12dc888c4af0221008a0c76132de5b5562ed2edd59e99667d60e94e208a06eb5364c8e73ac89715e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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