intranet.forum-epfl.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:67:d2:43:f2:3f:18:2b:52:cd:7a:8b:77:77:3d:47:9d:e9 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=intranet.forum-epfl.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:67:d2:43:f2:3f:18:2b:52:cd:7a:8b:77:77:3d:47:9d:e9
Serial Number (int): 296665432264483734180533510086584797994473
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:bf:36:68:b1:3c:4f:33:ee:cb:71:fb:e4:8d:fb:7f:26:d1:85:ad
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:86:cd:49:f3:51:5f:9c:6e:17:fa:a5:15:0f:4c:58:34:55:f1:3d
Fingerprint (sha256): 87:ee:32:9a:29:e9:27:fb:a2:f7:60:e6:6f:28:10:d0:94:b1:39:51:5d:ca:a8:3a:c5:bf:d4:73:f4:62:c3:31

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate intranet.forum-epfl.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intranet.forum-epfl.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

forumsrv1.epfl.ch
intranet.forum-epfl.ch

Other certificates including the domain name forum-epfl.ch

(limited to 100 certificates)
forum-epfl.ch
www.forum-epfl.ch
intranet.forum-epfl.ch
intranet.forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
intranet.forum-epfl.ch
intranet.forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
intranet.forum-epfl.ch
forum-epfl.ch
www.forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
intranet.forum-epfl.ch
forum-epfl.ch
platform.forumepfl.ch
forum-epfl.ch
forum-epfl.ch
intranet.forum-epfl.ch
intranet.forum-epfl.ch
intranet.forum-epfl.ch
intranet.forum-epfl.ch
intranet.forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
forum-epfl.ch
platform.forumepfl.ch
forum-epfl.ch
intranet.forum-epfl.ch
www.forum-epfl.ch
forum-epfl.ch
intranet.forum-epfl.ch
forum-epfl.ch
forum-epfl.ch

Certificate

The complete raw certificate details for intranet.forum-epfl.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296665432264483734180533510086584797994473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 03:41:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-13 03:41:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intranet.forum-epfl.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808286720376670176269126934626206071096892687686421498159637947297052449082076494430013131983189280225245937441675076356292109197874910004839610587600845686603991355468691543024136110714766152584759540676527189876938302032650528718399812578291647078103017446660576082021737555510080099450398680742162564814781148229248855533609854737820450135671927467584456057372325246552757990734430305712782748614103647262925225112053272856414684250587499560335957899172877826538092351480183571659784947879489656327529398918482984307276736402227136239643835757073030806173534186828796055944119669337623664713244303125939430291405718423642447028907971683355673084672033113979987058975108130899903567422472760047657682326902984803281977320370070838784482244801947555704277842784117256188018163001956048018465692612448467113684911857929223082681496770479892153236236800281282291574972648006264172242566507119319706271806172056098476692537862464746550405524187450426230169356282322837763065910345703857251319658253468805758916558544205841287080779917391751353543076439990884094750946085414678449011276332022636479539534111874887484783067379911066820916026537043578285662136330025049390058549399075676204970791436073750132248505641456794940292737960261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35bf3668b13c4f33eecb71fbe48dfb7f26d185ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forumsrv1.epfl.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.forum-epfl.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fa25afb490000040300473045022037dee074648e05c11b044eb0e06e984881db5c2d83d76be36d5656b8386152220221008d69acb6f87ab48d76b59374325695215a4b2d2cd1bce11d4d69e9a3779c82ad007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fa25afb2d0000040300473045022012155d1f5a5dd126a1760f0de3a372885ef21a012a0e2ab7180e98791b7a7bf5022100e5d500d89e8262f40983f49a9d437cdc18e60dd41083c4badff477c1aafe18f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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