ras.swisslife.ch

- Swiss Life AG -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 05:a7:85:ad:db:e2:df:43:75:a7:9b:e6:ad:c9:41:24 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swiss Life AG

Organization: Swiss Life AG
Organization unit: CH/IR
State / Province: Zurich
Locality: Zurich
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:a7:85:ad:db:e2:df:43:75:a7:9b:e6:ad:c9:41:24
Serial Number (int): 7515964889300784936623342208147865892
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 72:55:21:9f:bd:85:72:41:03:70:06:82:09:fc:82:3a:ed:10:58:ce
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 61:84:c3:ef:a6:bd:40:2a:ec:5a:48:51:01:6a:fb:94:d5:e5:04:1f
Fingerprint (sha256): 03:c4:85:11:03:66:40:a2:fc:dd:e4:34:14:b4:64:b8:d4:72:dd:70:31:dd:4a:42:07:39:8e:30:c4:c8:78:1f

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate ras.swisslife.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ras.swisslife.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ras.swisslife.ch

Other certificates including the domain name swisslife.ch

(limited to 100 certificates)
*.f2c-b.swisslife.ch
mi.swisslife.ch
vpn.finance.swisslife.ch
standorte.swisslife.ch
immopulse.swisslife.ch
sps.uat.finance.swisslife.ch
vote.swisslife.ch
sps-bcm.finance.swisslife.ch
events.biggestfantour.com
secure07.lithium.com
mydesk.swisslife.ch
berufsleben.swisslife.ch
ras.swisslife.ch
wahlensst.swisslife.ch
kvg.swisslife.ch
mylife-apps.swisslife.ch
secure04.stage.lithium.com
tax.swisslife.ch
berufsleben.swisslife.ch
entry.swisslife.ch
mis-q.swisslife.ch
secure08.lithium.com
sportclub.swisslife.ch
secure08.lithium.com
mis-q.swisslife.ch
immopulse.swisslife.ch
secure07.lithium.com
secure07.lithium.com
apps.uat.finance.swisslife.ch
*.entry.swisslife.ch
secure04.stage.lithium.com
events.biggestfantour.com
wwf.swisslife.ch
slwebext.swisslife.ch
mylife-sms.swisslife.ch
jobs.marugame-seimen.com
mylife-ucm-bcm.swisslife.ch
pwd.swisslife.ch
mail.swisslife.ch
*.wafcez-uat.swisslife.ch
mylife-bcm.swisslife.ch
*.f2c-uat.swisslife.ch
wlanldap.swisslife.ch
*.f2c-c.swisslife.ch
secure04.stage.lithium.com
sps.uat.finance.swisslife.ch
ras-s.swisslife.ch
vpn.finance.swisslife.ch
mylife-apps-sms.swisslife.ch
*.entry.swisslife.ch
calculator.swisslife.ch
mail2.swisslife.ch
secure08.lithium.com
sftppublic.swisslife.ch
wlanldap.swisslife.ch
mylife-sso-uat.swisslife.ch
immopulse.swisslife.ch
*.wafcez-uat.swisslife.ch
video.swisslife.ch
wlanldap.swisslife.ch
entry.swisslife.ch
magazin.swisslife.ch
secure04.stage.lithium.com
www.swisslife.ch
mi-q.swisslife.ch
sps.finance.swisslife.ch
secure04.stage.lithium.com
kundenpanel.swisslife.ch
secure07.lithium.com
secure04.stage.lithium.com
mis.swisslife.ch
www-d.swisslife.ch
wahlensl2s.swisslife.ch
mylife-ts.swisslife.ch
sftp.swisslife.ch
secure08.lithium.com
*.apps.sps.st.finance.swisslife.ch
entry-vpn.swisslife.ch
ts.st.finance.swisslife.ch
wahlenbasis.swisslife.ch
signon.swisslife.ch
partner.swisslife.ch
secure04.stage.lithium.com
*.patch-fimu.swisslife.ch
kundenpanel.swisslife.ch
*.apps.sps.st.finance.swisslife.ch
wohnvorsorge.swisslife.ch
*.wafcez.swisslife.ch
secure08.lithium.com
wendungen.swisslife.ch
secure04.stage.lithium.com
*.fimu.swisslife.ch
secure04.stage.lithium.com
immosearch.swisslife.ch
secure04.stage.lithium.com
answers-embed.campusfederal.org.pagescdn.com
hrdbint.swisslife.ch
mi.swisslife.ch
slfs1.swisslife.ch
*.a.portals.swisslife.ch

Certificate

The complete raw certificate details for ras.swisslife.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zEHMCaMyH4TeO2ckAyu
kapu2Xz0QXAZwAQ1kojNc+R9RC6MlYnSwxLLU4XLRwTfuHiamEI6EHeRohegm2Ip
h06GcZTVu3gibOKASGCSsbc/lGa77qzKLW2ehL+aMBw10qwBS3lB43DY4TmhNM/j
UmAlzAoY8V6eqTTsRbmXZ2/CUFtVH05YniOMs+/JxWNihzSO+DjwrI9VSBQbESx6
YCjEkC5GFsDLge4zJFW/GrUaKEEl5fTDcpqibhirMXOuD6pnT1PgjYPbtPSXc4bm
0uDKbQku1tAtQPilkqttDqXvf+fkXo87ASUwqa2EHxCTSd40tFjyxIdRPOiNy8Ae
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7515964889300784936623342208147865892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-11 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swiss Life AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH/IR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ras.swisslife.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27670365434136170394445101346066926524761785915422745685589670846068941444002606108859504677839675604425501586766060576563066563290090063543111049410762060758989484214912107137923357597452858451596658197455425470618877519827767495776891725827917161164766825675944896417857928142626312908649178324084653025430784273593376336612824364497024965139329027585801535064022541839471532598339785715627528192996343143461369474484566711793992297947815147548329002602669877389234502923783172658439784923026363448029390170286056118150936005420917978788170406799721526150809462735964595383359760902336195171682958136841158621404823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7255219fbd8572410370068209fc823aed1058ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ras.swisslife.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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