unog.ch

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number c7:f8:66:d3:49:5a:dc:8f:4c:fe:43:cc:2f:bf:3e:5b was issued on by Sectigo Limited.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=unog.ch

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): c7:f8:66:d3:49:5a:dc:8f:4c:fe:43:cc:2f:bf:3e:5b
Serial Number (int): 265806146327739009544673729783105797723
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: fc:8f:7e:21:9d:56:36:7a:45:d3:0a:57:19:05:5c:a3:99:c1:9d:31
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 0d:74:60:27:74:82:5e:7b:77:8d:f8:59:b4:5f:83:6d:e6:f5:26:0f
Fingerprint (sha256): 33:35:91:f5:af:90:89:ff:64:cb:c2:9c:96:83:44:69:07:c4:b2:8f:5c:0d:81:9e:28:46:d6:4a:1e:e1:4c:ae

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate unog.ch

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for unog.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

unog.ch
*.onug.ch
*.ungeneva.org
*.unog.ch
ilsgeneva.ch
onug.ch
tedxplacedesnations.ch
tedxplacedesnationswomen.ch
ungeneva.org
unspecial.org
www.ilsgeneva.ch
www.tedxplacedesnations.ch
www.tedxplacedesnationswomen.ch
www.unspecial.org

Other certificates including the domain name unog.ch

(limited to 100 certificates)
libraryresources.unog.ch
visa.unog.ch
lib-ezproxy-unog.unog.ch
*.unog.ch
icts-ctvcs-e2.unog.un.org
lontad-project.unog.ch
lib-ezproxy-dhl.unog.ch
lontad-project.unog.ch
unog.ch
*.lib-ezproxy-dhl.unog.ch
ask.unog.ch
*.lib-ezproxy-unog.unog.ch
lib-ezproxy.unog.ch
*.lib-ezproxy-unog.unog.ch
lontad-project.unog.ch
icms.unog.ch
lontad-project.unog.ch
eservices.unog.ch
tenderinvitation.unog.ch
visa.unog.ch
unece.unog.ch
ask.unog.ch
ippbx-vcs-e-jabber2.unog.ch
unog.ch
ippbx-vcs-e-jabber2.unog.ch
*.unog.ch
gvamail-backup.unog.ch
unece-filr.unog.ch
*.lib-ezproxy-dhl.unog.ch
*.unog.ch
unece.unog.ch
ask.unog.ch
tenderinvitation.unog.ch
unog.ch
*.unog.ch
icts-ctvcs-e.unog.un.org
unog.ch
*.lib-ezproxy-unogv6.unog.ch
*.unog.ch
libraryresources.unog.ch
*.unog.ch
*.unog.ch
icts-ctvcs-e.unog.ch
webmail-backup.unog.ch
unog.ch
lontad-project.unog.ch
*.unog.ch
tenderinvitation.unog.ch
libraryresources.unog.ch
unece.unog.ch
xbcalculator.unog.ch
unog.ch
lib-ezproxy.unog.ch
icts-ctvcs-e2.unog.un.org

Certificate

The complete raw certificate details for unog.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1mTm2/BHvkD/wX/Dmxh
n+SjRUpkAe1shPhegs4618tHgdUac9wzaCd2iDJ6ETm4iTyI8vwPqDB7VjApiDDS
ut81RgKEWAuLmrbF+zKx0Ji13IxCenYho7vMg7c8ZrpM5Xc/ietB7AmhmwfNclQE
AT1E1BFKjVG9JVp3A1lDN3Q+O1JIbMWkpANv7fkVS7VwGQ565hLkdl+dJh08A8eG
Ob7fEeO+R3/+YmwiciPn8M9M8cDFfWGJHxCKvESz94zgnANF+23Sl8ZrFIyAD/Q0
dwVlJKI7EzZ+D+HzgahBrL+nVhhCVEpalwCT/9h1hVohbMvOkfAyZU7cypInWUZj
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265806146327739009544673729783105797723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'unog.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25670547771204864381862598457160775937778094383263233397274656504022884437732495439066781957954858547788089291397010047878914889548104967946729755803217507984644704649674811141842147721104067479033834090962457184268587441609345937394422543614765502223833693733900567347641811710688666178018651826041038618982658408453196920499837043490901561124061072034874204366746497393344026096190354084179011537735199445750388061416309506708885081692225905247100963322225875514023755268816721863827397389178650301543868957135725256945571089020980772687583765140919222857891229022616732604772082339530986825522598540931470624973757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc8f7e219d56367a45d30a5719055ca399c19d31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017fe44db2ef0000040300483046022100e1bbb8cc5021e3498e85d904f7fff756f98c5dd704f28524a6a42421e65336a4022100ce6aa918077218858696166364af8a81f4c639526cca529401cb70ac3704bd570076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000017fe44db2ae0000040300473045022100f47c0b939318f8081ee4bc6d04a8c4b385866a8574156fe0db83c8c6621fb7df02201f67cd07a61a346f64921be52365ddb7480ae404b4e5e5727d04ccc9fe3cb185007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017fe44db28d0000040300473045022100dcaac8125ff1ca14ac83e4a165c6b166a818383d2ae36383826ef1d95c1a8db4022015035b15e23c190b769774a4757f571389344e76d9e044ef5f8718fd8364e270
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (253 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unog.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onug.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ungeneva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unog.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilsgeneva.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onug.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedxplacedesnations.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedxplacedesnationswomen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ungeneva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unspecial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilsgeneva.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tedxplacedesnations.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tedxplacedesnationswomen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unspecial.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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