secure-it.epfl.ch

- Ecole polytechnique federale de Lausanne (EPFL) -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 61:b2:13:23:c6:8c:a9:81:50:8f:56:65:5c:d4:00:b5:96:47:8c:ab was issued on by QuoVadis Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ecole polytechnique federale de Lausanne (EPFL)

Organization: Ecole polytechnique federale de Lausanne (EPFL)
State / Province: Vaud
Locality: Lausanne
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 61:b2:13:23:c6:8c:a9:81:50:8f:56:65:5c:d4:00:b5:96:47:8c:ab
Serial Number (int): 557743304722483933145537106417726741401855036587
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 74:0a:f3:0b:db:57:f4:a8:bf:a2:ea:a4:a1:85:02:0f:c4:33:cc:cd
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): 25:4a:ae:aa:f8:df:7f:47:99:78:b3:aa:2e:3e:f5:90:8f:ef:fe:0b
Fingerprint (sha256): 06:76:be:77:d4:26:3f:74:fc:af:78:a6:b2:a0:6c:32:14:31:37:3b:93:3d:d7:6c:c5:ca:e6:3c:33:12:af:f7

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate secure-it.epfl.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-it.epfl.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure-it.epfl.ch
security-scan2.epfl.ch

Other certificates including the domain name epfl.ch

(limited to 100 certificates)
nocsrv4.epfl.ch
asysmic.epfl.ch
ipese-mattermost.epfl.ch
lcvmwww.epfl.ch
tequila.epfl.ch
d3dev.epfl.ch
agepolysrv2.epfl.ch
icchilisrv3.epfl.ch
bib-ezproxy.epfl.ch
ssl470794.cloudflaressl.com
rgl.epfl.ch
script.epfl.ch
support.epfl.ch
spism.epfl.ch
sti-forums.epfl.ch
clic.epfl.ch
voting.epfl.ch
*.epfl.ch
zimbra.epfl.ch
frontiers2018.epfl.ch
sme.epfl.ch
ptpsrv3.epfl.ch
cmspc11.epfl.ch
dev-tequila.epfl.ch
network.epfl.ch
enacit-docuwiki.epfl.ch
clockprofile.epfl.ch
aclic.epfl.ch
benevoles.balelec.ch
psychoprot.epfl.ch
slims-uplin.epfl.ch
dslab.epfl.ch
go.epfl.ch
pocketcampus.epfl.ch
www.epfl.ch
lsmpc42.epfl.ch
test-courseware.epfl.ch
bbpcode.epfl.ch
intranet.forum-epfl.ch
test-payonline.epfl.ch
asgard.epfl.ch
igmgesrv2.epfl.ch
je-odoo.epfl.ch
lvgtools.epfl.ch
lca1srv2.epfl.ch
support.epfl.ch
medco.epfl.ch
clic.epfl.ch
ditsbsrv16.epfl.ch
mongodb-svc-1.epfl.ch
lsisrv4.epfl.ch
stisrv13.epfl.ch
suite.suisse.concours-alkindi.fr
festivalrobotique.epfl.ch
tclweb.epfl.ch
influxdb.epfl.ch
cdm-it.epfl.ch
act4change.epfl.ch
enacdrives.epfl.ch
lasigvm2.epfl.ch
tclgit1.epfl.ch
icchilisrv3.epfl.ch
face-search.epfl.ch
cmspc11.epfl.ch
energylabs.epfl.ch
onlyoffice-scistimm.epfl.ch
sapservices.epfl.ch
tclgit1.epfl.ch
privyseal.epfl.ch
spism.epfl.ch
infoscience-authors.epfl.ch
mleg.epfl.ch
enacshare-test.epfl.ch
slims-powerlab.epfl.ch
com402.epfl.ch
secure-it.epfl.ch
infoscience.epfl.ch
ssl470796.cloudflaressl.com
bmisymposia.epfl.ch
petitesannonces.epfl.ch
s2e.epfl.ch
dotty.epfl.ch
tclgit.epfl.ch
lmhibm5.epfl.ch
sdscgesrv1.epfl.ch
dllsti250.epfl.ch
icsil1.epfl.ch
*.dhlab.epfl.ch
enacit2web1.epfl.ch
lsisrv7.epfl.ch
tclgit.epfl.ch
visualizer.epfl.ch
sni.cloudflaressl.com
dcim-neo.epfl.ch
ewa.epfl.ch
intranet.forum-epfl.ch
sbitsrv8.epfl.ch
smtp1.epfl.ch
webmail.epfl.ch
sv-facilities.epfl.ch

Certificate

The complete raw certificate details for secure-it.epfl.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 557743304722483933145537106417726741401855036587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-03 11:41:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-03 11:51:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vaud'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lausanne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ecole polytechnique federale de Lausanne (EPFL)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'secure-it.epfl.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763831004863972532451713917967632223574843228458766329567743588957116445077084434694464103403045835898311924483057246253838937000591384562720674666045594607074113695982299622034157578296949836267647615160789832259656128317733296664904417685270687087469031125172330125864842509021318082162769245451768001342873834407674200723182154379761848814200721329824206688041192407247851067915471331526215954614658321378501418413953999626608238791105144791963894141787207293032429742816380008844907086088506304900593629076284054592885672623316652314144636640595898273856809030415172290604977183980787722254927448793053828774688968785820220773751219102955466344242196434167273930249285709776996005401458939754803170673659965815514018771296940873233218991220070721221345350842208921578749635604291930391795720360050023858667626412123094253329283360043717010430081208193753790517357659396212768981145726967331903095756735181071358906041261438149308193661790720043494247441858037939351242141809058348372189019444172845130168306881896665456116289801830153550201929934019013772055298846964552371897782706076646164461181237416980210982488897178829707589982779547181777056940784865654093688207668430126654168171329810703692480950082396594842675166768419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-it.epfl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security-scan2.epfl.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							740af30bdb57f4a8bfa2eaa4a185020fc433cccd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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