outlook.unige.ch

- Université de Genève -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:9d:e0:29:36:d5:d8:1b:27:26:79:3e:97:30:c3:21 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Université de Genève

Organization: Université de Genève
Locality: Genève
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9d:e0:29:36:d5:d8:1b:27:26:79:3e:97:30:c3:21
Serial Number (int): 6136649115006224750281336769599292193
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: da:2f:65:59:91:cc:f2:a2:1c:ed:14:49:d5:4c:1d:e7:c4:a7:b1:61
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 18:3c:bd:e2:5f:eb:22:f6:aa:e6:aa:6a:cf:79:9c:03:f9:18:4d:6e
Fingerprint (sha256): f8:a1:0d:49:a0:7a:b3:9e:8b:57:ca:84:fc:22:06:5d:9d:4e:0e:b5:a0:86:03:5e:7b:65:d6:6d:25:6e:d2:1f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate outlook.unige.ch

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for outlook.unige.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

outlook.unige.ch
autodiscover.unige.ch
autodiscover.etu.unige.ch
attachments.unige.ch
wuniex19-1.isis.unige.ch
wuniex19-2.isis.unige.ch

Other certificates including the domain name unige.ch

(limited to 100 certificates)
coursete.unige.ch
molbio.unige.ch
tecfaetu.unige.ch
iomba.unige.ch
catalogue-si.unige.ch
wuniwebklif1.unige.ch
masterentreprises.unige.ch
catalogue-si.unige.ch
entrepreneurial-leadership.unige.ch
troc-garde-enfants.unige.ch
appformationcontinue.unige.ch
vmlnxchatbot.unige.ch
quinzaine.unige.ch
ldisopen2.unige.ch
politicalconsumerism.unige.ch
mta.unige.ch
medweb5.unige.ch
idp.unige.ch
ppp.unige.ch
ige3.unige.ch
baobabmaster.unige.ch
legpro.unige.ch
bfc.unige.ch
social.unige.ch
reproductivebio.genev.unige.ch
gala.unige.ch
mediaprd.unige.ch
cucx-ud000.unige.ch
catalogue-si.unige.ch
adfsklif.unige.ch
transius.unige.ch
cibshm.unige.ch
katarzynawac.org
baobabmaster.unige.ch
petit-bazar.unige.ch
idp-test.unige.ch
inscription.fti.unige.ch
portail-test.unige.ch
jenkins-tst.unige.ch
outlook-klif.unige.ch
atlasfs16.unige.ch
mobile-natif.unige.ch
scienscope.unige.ch
biveg.unige.ch
idp-test.unige.ch
acil.unige.ch
lscrspace2.unige.ch
plone.unige.ch
masters.unige.ch
rodn.unige.ch
portail.unige.ch
osbl.unige.ch
ciel.unige.ch
internationaltrading.unige.ch
www.isdc.unige.ch
openidp.unige.ch
ciel.unige.ch
edutechwiki.unige.ch
ldlcmportal1.unige.ch
www.issco.unige.ch
medweb5.unige.ch
cite-uni.unige.ch
osbl.unige.ch
masters.unige.ch
phonogenres.unige.ch
auth.unige.ch
knox.unige.ch
gitlab.astro.unige.ch
executive.unige.ch
lifesciencesphd.unige.ch
auth.unige.ch
appformationcontinue.unige.ch
ekphrasis.unige.ch
molbio.unige.ch
emploi.unige.ch
babeldr.unige.ch
www.accept.unige.ch
uranie1.unige.ch
wunibmcwebtst3.unige.ch
cis.unige.ch
lnticemobiletst1.unige.ch
lunizulu1.unige.ch
operations-research.unige.ch
ldlcmadm1.unige.ch
colloid.unige.ch
ldlcmportal1.unige.ch
edge.meeting.unige.ch
catalogue-si.unige.ch
ple-connect.unige.ch
unequaldemocracies.unige.ch
palabos-forum.unige.ch
ecert.unige.ch
moocs.unige.ch
lsbioweb3.unige.ch
molbio.unige.ch
cibshm.unige.ch
bioseminars.unige.ch
ciel.unige.ch
bodmerlab-dev.unige.ch
melpomene1-mgt.unige.ch

Certificate

The complete raw certificate details for outlook.unige.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6136649115006224750281336769599292193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Université de Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'outlook.unige.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874998652710044632441156341012528263961643899339473412559318041019307003444689025954724884635845012753556812688452417860273389478825232288002767863172059424325416465722385820612895911052476289721821210120519340640594533718048009869511633388592398663235096291182823333135498529536032309551002807946584523059933720212495426692887921766091123086908762629355584559032498881625763905948253486063434016752923206759686496951913048933098529313874211544509452197028976851836542074238351121924065378098968866177347115779032312863261484998204647072877702699670989802686816641624972341655178833169924576812548429299643302304854810382657687128372345496825005113142349786848679365339367658225628726576381740063000553677355348277744387708645044929472014563397161623028728265770022977823040893291443982905964996321552088906960129122000515625248828954303049939771689012366536803032864199669744275522172551380090287921163518502082852408722243480204021635944773897112658293276179323070293985347252468817333223334249754815173382893959688936385278914838161560803106665848579345558489420489815563074554538139695708996106564695483591386278155050286722447994636018295436669775071424213040489280264407422277231933305799952162672935083160112568095070343237977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da2f655991ccf2a21ced1449d54c1de7c4a7b161
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.unige.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.unige.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.etu.unige.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attachments.unige.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wuniex19-1.isis.unige.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wuniex19-2.isis.unige.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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