spism.epfl.ch

- Ecole polytechnique federale de Lausanne (EPFL) -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 14:87:5f:70:40:6b:0f:9b:c2:89:64:74:a7:7c:4c:24:e8:f3:17:e2 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ecole polytechnique federale de Lausanne (EPFL)

Organization: Ecole polytechnique federale de Lausanne (EPFL)
State / Province: Vaud
Locality: Lausanne
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 14:87:5f:70:40:6b:0f:9b:c2:89:64:74:a7:7c:4c:24:e8:f3:17:e2
Serial Number (int): 117198729882693521048122812730468365715348068322
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: ff:1b:00:b1:86:7f:7f:70:a3:ef:db:46:32:19:95:41:36:bb:d6:27
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): a2:cd:71:79:b1:76:ed:bc:7b:25:b0:6b:d5:70:0c:0b:32:52:c5:ea
Fingerprint (sha256): 05:fb:d9:a1:aa:d3:8c:07:9c:50:98:bf:84:b1:32:5d:ef:7b:5e:da:1c:6a:6e:5a:25:18:a0:12:c2:ca:c6:f5

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate spism.epfl.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spism.epfl.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spism.epfl.ch

Other certificates including the domain name epfl.ch

(limited to 100 certificates)
nocsrv4.epfl.ch
asysmic.epfl.ch
ipese-mattermost.epfl.ch
lcvmwww.epfl.ch
tequila.epfl.ch
d3dev.epfl.ch
agepolysrv2.epfl.ch
icchilisrv3.epfl.ch
bib-ezproxy.epfl.ch
ssl470794.cloudflaressl.com
rgl.epfl.ch
script.epfl.ch
support.epfl.ch
spism.epfl.ch
sti-forums.epfl.ch
clic.epfl.ch
voting.epfl.ch
*.epfl.ch
zimbra.epfl.ch
frontiers2018.epfl.ch
sme.epfl.ch
ptpsrv3.epfl.ch
cmspc11.epfl.ch
dev-tequila.epfl.ch
network.epfl.ch
enacit-docuwiki.epfl.ch
clockprofile.epfl.ch
aclic.epfl.ch
benevoles.balelec.ch
psychoprot.epfl.ch
slims-uplin.epfl.ch
dslab.epfl.ch
go.epfl.ch
pocketcampus.epfl.ch
www.epfl.ch
lsmpc42.epfl.ch
test-courseware.epfl.ch
bbpcode.epfl.ch
intranet.forum-epfl.ch
test-payonline.epfl.ch
asgard.epfl.ch
igmgesrv2.epfl.ch
je-odoo.epfl.ch
lvgtools.epfl.ch
lca1srv2.epfl.ch
support.epfl.ch
medco.epfl.ch
clic.epfl.ch
ditsbsrv16.epfl.ch
mongodb-svc-1.epfl.ch
lsisrv4.epfl.ch
stisrv13.epfl.ch
suite.suisse.concours-alkindi.fr
festivalrobotique.epfl.ch
tclweb.epfl.ch
influxdb.epfl.ch
cdm-it.epfl.ch
act4change.epfl.ch
enacdrives.epfl.ch
lasigvm2.epfl.ch
tclgit1.epfl.ch
icchilisrv3.epfl.ch
face-search.epfl.ch
cmspc11.epfl.ch
energylabs.epfl.ch
onlyoffice-scistimm.epfl.ch
sapservices.epfl.ch
tclgit1.epfl.ch
privyseal.epfl.ch
spism.epfl.ch
infoscience-authors.epfl.ch
mleg.epfl.ch
enacshare-test.epfl.ch
slims-powerlab.epfl.ch
com402.epfl.ch
secure-it.epfl.ch
infoscience.epfl.ch
ssl470796.cloudflaressl.com
bmisymposia.epfl.ch
petitesannonces.epfl.ch
s2e.epfl.ch
dotty.epfl.ch
tclgit.epfl.ch
lmhibm5.epfl.ch
sdscgesrv1.epfl.ch
dllsti250.epfl.ch
icsil1.epfl.ch
*.dhlab.epfl.ch
enacit2web1.epfl.ch
lsisrv7.epfl.ch
tclgit.epfl.ch
visualizer.epfl.ch
sni.cloudflaressl.com
dcim-neo.epfl.ch
ewa.epfl.ch
intranet.forum-epfl.ch
sbitsrv8.epfl.ch
smtp1.epfl.ch
webmail.epfl.ch
sv-facilities.epfl.ch

Certificate

The complete raw certificate details for spism.epfl.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N96UGgF5E/rxtHGYE8p
E1Ho0uxtS0hF7yLyufCLP0ynxcsApyVft18K1x4VV4tq+t5QIEw9plTKfaTA3Ogp
3xr+XVG+2UuKUIbOW4GRisDhJxPNR3FFnkydLAwvtAgGywl0Z3aFn0Rg/zS8bcAd
SUD8BaftrxTBRDXiBXbJ8zYSfRiSZgSOTmyPvleq65+mNmAMHz6NWEbeZdxl0s0G
2y4EKjzZX+qv3Kor+98xM887KPc5BJPS2keY5ESN2BEfChv/rZeOjzaig3ABD6/h
kcaFcwAGq+2gH/P1qu+BlSimLZzyzSvFq/7WIhERcGSFcLLEgrVxcdj8+oDINrIL
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 117198729882693521048122812730468365715348068322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 08:21:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-06 08:31:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vaud'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lausanne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ecole polytechnique federale de Lausanne (EPFL)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'spism.epfl.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26872721658006945462132811941567398250081134401973146803562590488266529984644811802919763515779281044703710861514924895480171367989237570160635883826785089523680610447919924910983459690843336187281668286896586613464644661115554609624476766845108403193320095511657466527088954394488888282355024571349276986899316093989654712178564610297068621934353469447356149174191936183157387566559903275581078840626956432368888023127142762538533377341728188040645695058782379311099276943233335940667250139040528771039023465723679761986943619693965155109246861019543619068572685688850453374773889739185178557727318702704599497837391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spism.epfl.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff1b00b1867f7f70a3efdb463219954136bbd627
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0057280bf33cfe2f98b43afcc469c8df75edea8656d42c6d20dfa445713cbb70ecfc11200b66cac061d86ff363c6aaa3ee2aa637f87f1d5cb2c09bc96b979d37262b1e474b2883beb6be0108a0823c0c808102b1fa8f8f5addcdb783a7f55650b15221a51d8a471dc3d5465f8a886fdbbc08a548233c75b60df02cadc9bb21ae7c2a101b25b14f7d569b1b0419e29b730fa8aa6b7e1b1fbf98d389f5cb5040f35e61031eda361b1e59d2da83e9baecd6690b96d5bc67137fef28ea0b5312895dd81ac803e35adbb46eebee694f80ae6b2ee40ee6d7485e1b0be111a0c512514be5e5352b35ee84573a010063704e4f6ad384f6af5735967afd64785e6364e1e477