www.paracelsus.uzh.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:96:68:37:39:af:0d:4b:6c:32:d0:d5:93:58:ff:e6:76:89 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.paracelsus.uzh.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:68:37:39:af:0d:4b:6c:32:d0:d5:93:58:ff:e6:76:89
Serial Number (int): 312517739291276750459338042010223069525641
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:3d:cc:ab:b8:bd:e0:bc:f4:25:73:99:af:d5:8b:fe:ee:f5:fd:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:05:b3:1b:5a:7a:b9:dc:c8:92:98:89:64:d5:33:2e:bc:c8:48:26
Fingerprint (sha256): 02:0a:00:01:41:fd:6d:66:53:57:0a:72:2d:7a:e7:db:c9:e0:01:eb:06:50:03:f5:53:72:6f:7d:af:cd:fc:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.paracelsus.uzh.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.paracelsus.uzh.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.paracelsus.uzh.ch

Other certificates including the domain name uzh.ch

(limited to 100 certificates)
www.msfinance.uzh.ch
www.phonebook.uzh.ch
ikmz-itmanagement.uzh.ch
webstats.uzh.ch
idladmn01.uzh.ch
www.phonogrammarchiv.uzh.ch
www.tiny.uzh.ch
www.medalumni.uzh.ch
www.evobio.uzh.ch
kitt.cl.uzh.ch
www.weiterbildung.uzh.ch
newsletter.uzh.ch
www.teachers.uzh.ch
www.rht2020.uzh.ch
geo441.wiki.geo.uzh.ch
www.planet-accounting.uzh.ch
www.zirp.uzh.ch
www.projekt175jahre.uzh.ch
www.rechteck.uzh.ch
mnf-44.uzh.ch
www.chir.uzh.ch
www.sciencelab.uzh.ch
www.caslg.uzh.ch
www.inform.uzh.ch
www.tiny.uzh.ch
www.medlead.uzh.ch
www.vertrauen-verstehen.uzh.ch
www.vetanatsammlung.uzh.ch
www.languageattitudes.uzh.ch
www.sustainability.uzh.ch
jupyterhub.anatomy.uzh.ch
www.cabmm.uzh.ch
www.cmme.uzh.ch
www.fvidg.uzh.ch
www.hochschulmedizin.uzh.ch
www.sciencelab.uzh.ch
www.pentateuch.uzh.ch
www.uniability.uzh.ch
www.sprachenzentrum.uzh.ch
www.vetpharm.uzh.ch
www.rd.uzh.ch
www.lsscairo.uzh.ch
www.bmel.uzh.ch
www.vetanatsammlung.uzh.ch
www.cees.uzh.ch
www.fintech.uzh.ch
www.gschmois.uzh.ch
www.vetbiblio.uzh.ch
idsmtp01.uzh.ch
ptl12.math.uzh.ch
www.zmb.uzh.ch
www.alumni.uzh.ch
www.sustainability.uzh.ch
www.econ.uzh.ch
www.linca.uzh.ch
www.tinnitus.uzh.ch
www.kjpd.uzh.ch
www.vetcom.uzh.ch
www.crpp-pain.uzh.ch
idsearch01.uzh.ch
demo.olat.uzh.ch
www.sozpsy.uzh.ch
intranet.csg.uzh.ch
wiki.icu.uzh.ch
zzm-kurs.uzh.ch
ldap.s3it.uzh.ch
www.comparativelinguistics.uzh.ch
www.agenda.uzh.ch
www.pa-bvk.uzh.ch
www.uniterm.uzh.ch
winterweek.icu.uzh.ch
www.oec.uzh.ch
getit.wiki.geo.uzh.ch
www.zhm.uzh.ch
www.ori.uzh.ch
www.imcr.uzh.ch
www.to2.uzh.ch
www.seon.uzh.ch
idltrav02.uzh.ch
www.comparativelinguistics.uzh.ch
www.finreg.uzh.ch
user.math.uzh.ch
www.ssn.uzh.ch
www.paracelsus.uzh.ch
www.blockchain.uzh.ch
www.methodenberatung.uzh.ch
fgcz-transfer.uzh.ch
www.psycholinguistics.uzh.ch
www.immunology.uzh.ch
www.webroot.uzh.ch
www.philosophie.uzh.ch
econgit.uzh.ch
www.rww.uzh.ch
www.chir.uzh.ch
www.ib.uzh.ch
www.uniabilitych.uzh.ch
www.unipublic.uzh.ch
www.global.uzh.ch
sdesk.uzh.ch
idhopep02.uzh.ch

Certificate

The complete raw certificate details for www.paracelsus.uzh.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312517739291276750459338042010223069525641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 23:12:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-13 23:12:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.paracelsus.uzh.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776368022253597164723412185194917277017829700501364149017537494934470276455544172951267525762511560248719517840782569972476651458245369003990596696148918513896875350957590160329628630027784121859601004147759431645030658549208261152330989919475494133299700143634548499885060712333183373376239514016191576247793509566830273128250199503316534078472827315414329858223875856817372492349396574485152847892242315349782730925708238039065676627413779569567348114468186652291656167608960526126780795027984202869509941353466939060962046917820359233767769646874105110984754618971869255248638610355856318314262328307364413555340279279235451316320508390585217797680018160260111129610516756194215130885523481835008095664437926851653694990125019987131505859402216537982884026847227019720125673440345546819908276094951000480633153164669961035871680645720123975407109965885666921936390471329661039742743003013038900827187801806082945100418073150975478710584858059790729988152517488901847716585732915026398788012197409815469208536145399207598197655436475277650708563275933240684012691476827602663323517769226590090010005939239650031362512633395050515196789644090686235031841810835221858894827513759344251712214072677363709150984977531234198620941800863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b3dccabb8bde0bcf4257399afd58bfeeef5fd64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paracelsus.uzh.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a1e56e4580000040300483046022100e513a018a122e775928afcfdf27e52e1ac735f0e7d9e873c012c93c66e288abe022100e01e2e5dbbaf60eb56490536962247c33dca2c7a9541f3c62066a95b230162f100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a1e56e4c50000040300463044022005a626557d8bf397657c7f4351b11f81e4327e8a9d1fcd5f4b70d0ba86cfa7c6022021e704eef94f9dc19b829f8beb54462d5fc44e706e75f16dc6e3dea8c5de30e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0010248ad9eb3273673bc2f8c60b587f1b8039d564d8120768a9353160b5a0616c6eb13cab1b7969d7e939f063b4e508a625f33fd684c6891f2bf400ae51fb0730501424240fec7a73a2acc82e3d4fc166627ec40478949a73993118be99ddd831ba60109fe2ef6c8e426f052fc1d353b5fa009ddd12ac304a23cdb5702bae96d4984a92eddec9a927416c94b316957a5942aba36e530e20e4a941561a8c626d1a06ca807929aa57466080b4d46c5ca3ca3d01311cce06c707a37206cb5f349790d4ed1d673ccf6318e0eaa1fb6fd3d6fd89504251efb6e31552bc2481aa3a01a681c088bf91346cef26eaca28c1e5b01447e85a2a17dd141ea872c1694ee7c1c8