intranet.forum-epfl.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:5a:f2:b2:c9:97:68:82:27:b8:31:0d:6c:f1:a6:d5:d3:cc was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=intranet.forum-epfl.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5a:f2:b2:c9:97:68:82:27:b8:31:0d:6c:f1:a6:d5:d3:cc
Serial Number (int): 379397158242506343801347580737433384637388
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7c:7b:0c:13:df:96:a8:63:05:27:6a:5b:f5:d6:5d:f3:39:8e:d8:a5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8d:5c:f2:8f:5b:d2:2a:68:bf:94:51:54:4d:21:a4:6b:ee:c4:6c:64
Fingerprint (sha256): 03:4b:da:ca:8d:84:89:a4:ad:d0:b3:b1:5e:ba:f7:c4:92:f8:a7:e1:63:57:85:bb:0a:07:88:2f:4d:10:06:f0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate intranet.forum-epfl.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intranet.forum-epfl.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forumsrv1.epfl.ch
intranet.forum-epfl.ch

Other certificates including the domain name forum-epfl.ch

(limited to 100 certificates)
forum-epfl.ch
www.forum-epfl.ch
intranet.forum-epfl.ch
intranet.forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
intranet.forum-epfl.ch
intranet.forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
intranet.forum-epfl.ch
forum-epfl.ch
www.forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
intranet.forum-epfl.ch
forum-epfl.ch
platform.forumepfl.ch
forum-epfl.ch
intranet.forum-epfl.ch
intranet.forum-epfl.ch
intranet.forum-epfl.ch
intranet.forum-epfl.ch
intranet.forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
platform.forumepfl.ch
forum-epfl.ch
intranet.forum-epfl.ch
www.forum-epfl.ch
forum-epfl.ch
intranet.forum-epfl.ch
forum-epfl.ch
forum-epfl.ch

Certificate

The complete raw certificate details for intranet.forum-epfl.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgISBFryssmXaIInuDENbPGm1dPMMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTIwNDQ2MjZaFw0y
MDAyMTAwNDQ2MjZaMCExHzAdBgNVBAMTFmludHJhbmV0LmZvcnVtLWVwZmwuY2gw
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCepGtlDCY/e8IZXadrvZC3
QP9lMvAfAx4CEYKhwbvfFLf/IDHDfahJJf6158t/96xGUCOLd1FSTJdWBUIrB20u
fFugjhmNjRIYoeUZcXki5UTX2F2X0g/XCKgPUnfH2l9mUFBMU5sjOa3qxV17Araz
I3KG92HBetsvz1X9e1VSIFsTNF8YQMHawUnvJaeubL7os2GscTqSk4EjHxTwToO5
+2daUWLl5bCpJjeIpE9L+c2dGvKtboL/r4+a0Oz04UBQnU7PElL5hoKZ+rdVbckX
dN3bd8B1zvGBm/1uWlYsV9bsYTJcc1pDpJvBj2gGvWGi0v8GnJHQSPCfovc5H8XP
jhPInoZ04+rA6F+6GQs5yWa+rjq6U96YN4i2BpVppoa/jBBVVLAoaJHO+MW9gOcv
mYeYl7D0X+hOLXR3GuJvpY5cNyqvFUQYECI5KvUePbV9XMmA5GHB+mqR1lZfrJ6C
G7YDK89p0kxQaZHJYgJBqFgNHEmwSsArpd3s8p6mN1Jji+K//XejBzVTlQTwqZ+5
GnJNDRNKSdVsed+M/YxSDmkBIIUkxlvKphItWHjFoyoTS/5xscyh2lY3i4zmQVua
lbyawh6WdRqO0e2zHV6p+WBamDI1EEFjgW9206jSpHKHai0W3gz7dN27mb3XQGOl
AEPoINW76k7FuD8FDnAynQIDAQABo4ICfDCCAngwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBR8ewwT35aoYwUnalv11l3zOY7YpTAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMDQGA1UdEQQtMCuCEWZvcnVtc3J2
MS5lcGZsLmNoghZpbnRyYW5ldC5mb3J1bS1lcGZsLmNoMEwGA1UdIARFMEMwCAYG
Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu
bGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUAXqdz+d9W
wOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFuXiYfAgAABAMARjBEAiBc3jyo
YHdaF5vo7YM9ly5n/mscvXHLebc9q8x2SwDi8AIgBPhV3tBP5YixWwXzWmKpamKj
vFXvL+Bg+/J35m26acUAdQAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOi
HAAAAW5eJh8pAAAEAwBGMEQCIBk0XWq8YNwXTuTQ2MkmM/Ja8GMBwTRMrxPV5H9e
xCUcAiAysrI6t1a5jAqSl5ryKFf+Sgge1Nmj5VSUTeUzU6wBeDANBgkqhkiG9w0B
AQsFAAOCAQEAi6WdAYcmxJIfyzx1C5+BNFFr37yHDYuGRM9gJxvhkjxnsJDcicde
tzwNLlxsfOK6f+PiS6LxzUiUI2TXBbjEhcnNn3HJUlzUKhdlxKpPsPPWfJxwCi65
Kq0FW5HJosyzFQ9O36ljwHrUyvtbrvYmcba2zkEIoksI6/RMrMxmZ5NRUlzQUhYj
bgx+kRHxFQc1A68OIkl2rOPTg8wcL9IykWI47UtDKExDFbEo2JgiVRAQNf7jCCbp
OF3z2zgv1QLuIuQvIW1wBzUxOuwVy8KcfAKnClXLY8SPYLJXdCeiZhDJqC0Zz/Aa
OYSjeViAxMwj7AxgawP36Z6X2kNwOYmI7g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379397158242506343801347580737433384637388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 04:46:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 04:46:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intranet.forum-epfl.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 647203970095361438057499822164141433231367529993331829373022043829893524592183685058171030211201601273346765072732273500306819785950431756879465287691986492494734480003057179169250358270869354684895354133628015886126761759622754606096584065198063826351381236100839557507181186994146780064204259729537242480728799709785196883932919897912137794953849165816323232833182344501978336078154169017981342004204480381412612499407769746430191474421867316192252778136503906739697891281031361660092705942013304592315274948548589101076797436948764845900417739076610803163478887355163761633941846388637949048670771261566299530882412404030347624478890597914456515962279836112799796148192395745318169331866734551713704254450427041816309333511002011034335057674338980595194998934877171223909937526388908832759519043177866661128367960854100971745715169964145105059883788575249427643840697897625344781222887180729355506374629181215956582415794977496854562899088303345944220901102871148776137412266743920019767355344927494390505578632778066152794009019858271125045631220366904309893945828621557910854968022423725757489687399221172726556291688960443012822388862589152173101431108471875611033392105326341708417235012512828882550461025285183827912116155037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c7b0c13df96a86305276a5bf5d65df3398ed8a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forumsrv1.epfl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.forum-epfl.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e5e261f02000004030046304402205cde3ca860775a179be8ed833d972e67fe6b1cbd71cb79b73dabcc764b00e2f0022004f855ded04fe588b15b05f35a62a96a62a3bc55ef2fe060fbf277e66dba69c500750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e5e261f290000040300463044022019345d6abc60dc174ee4d0d8c92633f25af06301c1344caf13d5e47f5ec4251c022032b2b23ab756b98c0a92979af22857fe4a081ed4d9a3e554944de53353ac0178
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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