cms.staging.entertainment.swisscom.ch

- Swisscom (Schweiz) AG -

Issued by Swisscom Rubin CA 1

About this certificate

This digital certificate with serial number b0:d2:52:4a:17:3a:9d:e6:31:ae:3e:91:fc:f2:fd:12 was issued on by Swisscom.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • KeyUsage [ContentCommitment DigitalSignature KeyEncipherment] (00000111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
Organization unit: IT
State / Province: Bern
Locality: Bern
Country: CH

Swisscom

Organization: Swisscom
Organization unit: Digital Certificate Services
Country: ch

This certificate has expire since

Certificate Details

Serial Number (hex): b0:d2:52:4a:17:3a:9d:e6:31:ae:3e:91:fc:f2:fd:12
Serial Number (int): 235036178626098051506894592546174074130
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5f:37:22:54:18:a8:65:de:1d:cf:72:81:be:05:8d:c6:d4:8a:d3:72
AuthorityKeyId: 2d:c2:a7:a3:63:3e:3f:83:47:ab:48:33:36:81:85:f7:d4:e9:ac:c0

Fingerprint (sha1): c3:aa:c9:0e:62:74:be:0b:02:e9:55:16:b6:a2:f1:92:d8:4f:b2:25
Fingerprint (sha256): 00:2f:38:73:fd:29:58:73:b5:18:b3:b5:29:e7:ab:04:c8:ff:fe:f9:df:ee:91:db:3e:e7:76:4f:5c:2c:e5:bc

Issuing Certificate URL: http://aia.swissdigicert.ch/sdcs-rubin.crt

Revocation information

OCSP Server: http://ocsp.swissdigicert.ch/rubin
CRL Distribution Point: http://crl.swissdigicert.ch/sdcs-rubin.crl
CRL Distribution Point: ldap://ldap.swissdigicert.ch/CN=Swisscom%20Rubin%20CA%201,dc=rubin,dc=swissdigicert,dc=ch?certificateRevocationList?

Check the revocation status for certificate cms.staging.entertainment.swisscom.ch

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cms.staging.entertainment.swisscom.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name swisscom.ch

(limited to 100 certificates)
olr-stag.swisscom.ch
cms.staging.entertainment.swisscom.ch
email.swisscom.ch
cp.cspp.swisscom.ch
spscms4linux02.exotrack.swisscom.ch
tvnow.swisscom.ch
internetbox-nas.staging.swisscom.ch
issue.swisscom.ch
secure04.stage.lithium.com
blockchain.swisscom.ch
partner-authz-staging.swisscom.ch
netzausbaukarte.swisscom.ch
magazin.swisscom.ch
i.swisscom.ch
docsafe-beta.swisscom.com
twint-prd.swisscom.ch
ssc1.imst.swisscom.ch
octane.swisscom.ch
*.portal.bankinghub.swisscom.ch
gaia-gateway.vega.m6s.swisscom.ch
iot.vodafone.swisscom.ch
sbc1-emea-che-zhh.teamsa.swisscom.ch
ccs.join.swisscom.ch
*.tcsbc02.teamsa.swisscom.ch
multi.swisscom.ch
l2.shared.global.fastly.net
bcs.join.swisscom.ch
secure05.lithium.com
wast.swisscom.ch
sdx.swisscom.ch
identity.phoenix.m6s.swisscom.ch
ccs.join.swisscom.ch
l2.shared.global.fastly.net
global-portal-dev.swisscom.ch
l2.shared.global.fastly.net
btbcs.swisscom.ch
tools.swisscom.ch
l2.shared.global.fastly.net
ssc1.ims.swisscom.ch
internetbox-nas.staging.swisscom.ch
lite.m2m.swisscom.ch
vimaphet-dasbc1.joind.swisscom.ch
extranet-acc.swisscom.ch
extranet-int.swisscom.ch
shop.swisscom.ch
secure05.stage.lithium.com
internetbox-nas.swisscom.ch
media.oid.swisscom.ch
5670976570261504-fe4.pantheonsite.io
acs.joind.swisscom.ch
secure04.stage.lithium.com
dis.swisscom.ch
wrc.joind.swisscom.ch
*.tasbc01.teamsd.swisscom.ch
sensu-backend-8.exotrack.swisscom.ch
simple2.swisscom.ch
secure04.stage.lithium.com
5754818358411264-fe2.pantheonsite.io
issue-int.swisscom.ch
l2.shared.global.fastly.net
wmt5443.conferencing.swisscom.ch
check.swisscom.ch
clientrvk.testweb38.swisscom.ch
tpe-staging.swisscom.ch
marketplace.bankinghub.swisscom.ch
inone-game.swisscom.ch
check.swisscom.ch
dns-vetting1e.map.fastly.net
handyhilfe.swisscom.ch
secure04.stage.lithium.com
hpalm-app-prd.swisscom.ch
cockpit.dev1.swisscom.ch
secure05.stage.lithium.com
rtc-dis.swisscom.ch
het-cds.swisscom.ch
mds01.swisscom.ch
www.survey.swisscom.ch
wfmweb.swisscom.ch
tv-thankyou.swisscom.ch
inone.swisscom.ch
buyback.swisscom.ch
secure04.stage.lithium.com
stag-messagingproxy.swisscom.ch
secure05.lithium.com
oms-tst.omsaas.swisscom.ch
cockpit.swisscom.ch
vergleich-server-cloud.swisscom.ch
buyback.swisscom.ch
hipchat.swisscom.ch
regapi-1olb.swisscom.ch
stream.swisscom.ch
repairmanager.swisscom.ch
robotics.swisscom.ch
zhheapp-sasbc01.joineapp.swisscom.ch
git-test.swisscom.ch
5754818358411264-fe2.pantheonsite.io
acs.gated.swisscom.ch
www.lawe-network.lime.novu.ch
chat.projuventute.swisscom.ch
cw000130.exotrack.swisscom.ch

Certificate

The complete raw certificate details for cms.staging.entertainment.swisscom.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC9zn16s45pAIxAFhdOi
6NOD7KDdmaNc+lJWHqefFehGiGpx02wjDlkfkHf6ROcRBTfOACdoGx6b6R8J3xCx
K3n/vSCEHUEWELlLG/RBwNm246+sodg+lmiJWbXnKZeifbizR5xzpPvjSYdS8VNb
nXQH6lTxOnoAmTGpC09zYJRwVh+nmGaY8inqL3ZRl25wzPLIwIktxLqFyISWto4a
fW8GwcOBZWi302rzu69eKWLhKYea6NEUk8QXD80BDQn15XXNdWgiVI/6CxgCXvxU
GSxeFFjfPEiAHW72hbRJev4BP89fbcrr0PRKpRZ2X0NHn+v1k1/ko9cfWJ1LRI5X
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 235036178626098051506894592546174074130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital Certificate Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom Rubin CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-11 13:19:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-11 13:19:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cms.staging.entertainment.swisscom.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23251247394739477789114263557791474793279480098761942104734428127520478994392033363561586576770425631360562453218876192527420915618562799488699804996509463971001798179498454305929203095824354333766429420206974728107355297800550922924399071974719934793108404629533688560419301088025960778574389574202068588872938050081398657650500231177076979176376365910827217479976622650094606395212863151006803378872552444807513493650039893477777257315850484707645723008593759355875993114828374828081266886929132117637788231624906270665270979841260790331316135520670400854980994175530641966021092708062429317907773048972052173576099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2dc2a7a3633e3f8347ab4833368185f7d4e9acc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swissdigicert.ch/rubin'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swissdigicert.ch/sdcs-rubin.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.83.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.swissdigicert.ch/documents'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swissdigicert.ch/sdcs-rubin.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.swissdigicert.ch/CN=Swisscom%20Rubin%20CA%201,dc=rubin,dc=swissdigicert,dc=ch?certificateRevocationList?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f37225418a865de1dcf7281be058dc6d48ad372
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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