www.thuya-schweiz.ch

Issued by Encryption Everywhere DV TLS CA - G2

About this certificate

This digital certificate with serial number 03:fc:22:d4:9f:5e:1b:7f:63:5b:bb:27:1b:74:4a:0a was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.thuya-schweiz.ch

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:22:d4:9f:5e:1b:7f:63:5b:bb:27:1b:74:4a:0a
Serial Number (int): 5296849243324386804363788014136347146
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 87:da:1b:9f:f4:53:2a:2c:6c:19:d5:06:4e:46:f9:78:6f:1a:f2:0d
AuthorityKeyId: 78:df:91:90:5f:ee:de:ac:f6:c5:75:eb:d5:4c:55:53:ef:24:4a:b6

Fingerprint (sha1): 9b:ad:c5:db:82:21:d6:6d:db:0e:e5:d9:3c:aa:52:10:1a:d6:e0:a8
Fingerprint (sha256): 00:00:9d:6d:8f:4a:3b:06:ca:8b:f9:82:0d:db:44:4f:20:ec:1e:58:f2:9b:1e:e2:1e:af:9a:d1:62:d0:f5:04

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate www.thuya-schweiz.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.thuya-schweiz.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.thuya-schweiz.ch
thuya-schweiz.ch

Other certificates including the domain name thuya-schweiz.ch

(limited to 100 certificates)
www.thuya-schweiz.ch
thuya-schweiz.ch
www.thuya-schweiz.ch
test.thuya-schweiz.ch
thuya-schweiz.ch
www.test.thuya-schweiz.ch
www.thuya-schweiz.ch
www.thuya-schweiz.ch
thuya-schweiz.ch
www.thuya-schweiz.ch

Certificate

The complete raw certificate details for www.thuya-schweiz.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx5o2xROH/ot57bsoVt+
fK2PlQy8TiI0UTWN+U2Lh5/9MWO5ARxzLbNORgQ9GQrdQaiTic7/bOou8YT/oBkd
ZTewHHOnmOa7skU9R5i87g+/pS9zzxh5v5YdrzJiR6ovepAdeRCQjiy1uy+nKoOk
S2/U/jM5v0GqjzjEKFxersnt+5YEwuIfS3lFsUfripOv1ICWLnWTBnDybHgmJXjD
3E8tufU/UZm5vVJIjH7d/ZKXlqzapA6ucQfi8orzryfI8CgZDY/BGSiurW85/tLZ
BBA9bGX48x0jClZoQe7cmqSiP9eYshfkLaNeVPAH+tmUmQMKZCj5Ppnf0nGT17JN
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5296849243324386804363788014136347146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.thuya-schweiz.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23116605337931389425078926803509087458128150653600980890387291417611261528665882865726852636602904881861559793497494668964827352376770612540491011321610437647052022612711893111160141766666926843269207671438175309308934635612002786055216447327700617698250111235479497808624956700713813778682610014030156637717305225676129606367897477470902782041906628370725100419065356471752325254609179151240435702346963903383691457646592627705240189941426474246859580704239538520030212583093092906125767280024977756045280138956371741466521557671774974065670724278120084450952262529002382870448178971902407488527483727987810449378619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78df91905feedeacf6c575ebd54c5553ef244ab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87da1b9ff4532a2c6c19d5064e46f9786f1af20d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thuya-schweiz.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thuya-schweiz.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000160e7cf105f00000403004630440220529d52d2512c683eea06ac1ea7e3c0f04b133a2164654b19c8aaef628b518fbb022021c569b9e5bee28d5a2a7264d09a3bcd1c49939741ac57d4ab5559480ad0a0850077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000160e7cf107a0000040300483046022100b26e454075a1eaf2a3d2f1bfab1d8ccfe04427e2a4753c20ab38008e4c7228a6022100c9af8e59ac4d383e218a91420f26ac81d40ef9083633f2f2425fa5fb5c1810c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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