connect.gmz.migros.ch

- Migros -

Issued by Migros CA Class1

About this certificate

This digital certificate with serial number 13:c1:4d:df:00:00:00:00:15:3f was issued on by Migros.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Migros

Organization: Migros
Organization unit: SERVER
Country: CH

Migros

Organization: Migros
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 13:c1:4d:df:00:00:00:00:15:3f
Serial Number (int): 93290795984409929454911
Serial Number lenght: 77 bits, 10 octets

SubjectKeyId: 5f:c0:2c:b1:f6:6b:29:5c:82:25:f7:96:7d:c5:df:95:e1:db:d8:69
AuthorityKeyId:

Fingerprint (sha1): 1a:48:0a:de:5b:2a:91:1f:6b:2e:c7:30:1e:18:9e:91:e1:b3:94:7c
Fingerprint (sha256): 04:c3:f8:58:a0:70:40:26:dd:20:3c:23:b1:e0:98:b3:27:5b:a1:78:2c:11:54:d9:11:05:8e:43:44:6c:39:c5


Revocation information

CRL Distribution Point: ldap://metadir.migros.ch:389/cn=migros_ca_class1,o=migros,c=ch

Check the revocation status for certificate connect.gmz.migros.ch

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect.gmz.migros.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Time Stamping
Email Protection
IPSEC User
IPSEC Tunnel
IPSEC End System
Code Signing
Client Authentication
Server Authentication

Extensions

4 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name migros.ch

(limited to 100 certificates)
secure03.stage.lithium.com
commentmatch.m-budget.migros.ch
secure06.lithium.com
mitarbeiteranlass.events.migros.ch
rsc.migros.ch
staging.prod.pema-coupons.mdb.migros.net
test-basel.migros.ch
secure06.lithium.com
photoset.widgets.migros.ch
secure03.stage.lithium.com
migusto.migros.ch
aus-der-region.migros.ch
test-mgo-api.migros.ch
secure03.stage.lithium.com
gmaare.elearning.migros.ch
meineidee-ext-s.gmsap.migros.ch
famigros.migros.ch
perimeter-dmz1-meineip.migros.ch
api.migros.ch
cadismobile.migros.ch
test-hybrid-app.migros.ch
pos-coupons-api.migros.ch
storybox.migros.ch
dev-basel.migros.ch
support.migros.ch
test-web-api.migros.ch
inveco-s.gmsap.migros.ch
konsumententagung.migros.ch
test-mom.migros.ch
portal.migroszh.ch
login.migros.ch
m-learning.migros.ch
secure03.stage.lithium.com
ca.status.clio.com
e3mobilege-test.gmge.migros.ch
photoset.widgets.migros.ch
staging.qual.mam.mdb.migros.net
admin.operations.migros.ch
mymigros.ch
m-learning-t.migros.ch
yellowworldtest.migros.ch
test-mobile-app-api.migros.ch
corporate.migros.ch
recipeapi-t.gmsap.migros.ch
mcrm.migros.ch
test-socialmedia.migros.ch
meineidee.gmsap.migros.ch
connect.gmz.migros.ch
mcds.migros.net
ucb10testews.migros.ch
live.qual.kms-portal.mdb.aws.migros.ch
dev-migipedia-backend.migros.ch
bb2status.mambu.com
storybox.migros.ch
test-help.migros.ch
*.gmaare.migros.ch
quiz-adr.migros.ch
secure06.lithium.com
tiptoimania.migros.ch
secure.clubs.migros.ch
terrasuisse.migros.ch
retitest-ews.migros.ch
ins-staging.migros.ch
jobs.migros.ch
test-winwin-vonuns-vonhier.migros.ch
mein.m-budget.migros.ch
sni.cloudflaressl.com
thehost.widgets.migros.ch
allowlist.sterda.com
report-download.migros.ch
proxy-mdb.migros.ch
test-corporate.migros.ch
ca.status.clio.com
test-auth.magnolia.migros.ch
meineidee-ext-t.gmsap.migros.ch
lyncaccess.datacenter-migros.ch
dev-vaud.migros.ch
dev-cdn.migros.ch
api.migros.ch
admin.logistikplattform.migros.ch
live.prod.image-upload.mdb.aws.migros.ch
image-upload.mdb.migros.net
secure03.stage.lithium.com
cert-test.migros.ch
rc-mobile-app.migros.ch
mylogin.migros.ch
test-hybrid-app.migros.ch
p99.migros.ch
proxy-mdb.migros.ch
auth.migros.ch
ca.status.clio.com
wartung.migros.ch
staging.prod.pema-coupons.mdb.aws.migros.ch
natro.gmaare.migros.ch
impuls.migros.ch
allowlist.sterda.com
recipeapi-s.gmsap.migros.ch
m-payment.pos.migros.ch
fragments.migros.ch
ostern.migros.ch

Certificate

The complete raw certificate details for connect.gmz.migros.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+7RSFcye7mNSxh2Siqf
hZHYbKGy/oCuvFyLY6ljk4gwFCdIUhrCO/v2oEG1apndGwsJ5rKuGxbrmT4EmJ6r
SU2wi7DHp43i+ATDqJvr6zO30hXAjnbM+xJNWktTPfotnPgcfPGiCcWnLIzy3AUH
HX53o/IHBDKpnhAUDNpTELdYuz7P6aXkpXw5Lftyk6Fnyu8O2Yg0IRuubyjf1fci
3c6HZuFIMfDdEekm5UqgvlJLEUZGeUu6IJGBTvhAjB1orSax87LRbpYqkxVkuqks
8CsSDtPAjkCiWJqMghdSp8gDyAZSPm4Yj+5/9XS9HPdF2Q0c2UintLNqgeL3fCw9
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93290795984409929454911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Migros'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Migros CA Class1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2007-07-10 12:23:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-07-08 12:23:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Migros'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SERVER'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connect.gmz.migros.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25239187991639163340172435143907944972569480389112576345970553102426866562878819401382530456111681818958725125745299156241615781605248546593083329219647511099049637313265280258740640434840636755838318851145851055396253856206903070729207732753906934761993486582755166964378548384267251181832068943758377802375393195001534532404164858615691952818416148896140765096472145696628002663788255039770994031156184484275431966526016636107564840757673453906714342090453113126593052968264992929073612105388996404254262075812963037722158278054922364735781586241010912112340698392427495804245332939690766834067713605321961077751233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fc02cb1f66b295c8225f7967dc5df95e1dbd869
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (344 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.5 (whqlCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.8 (timeStamping)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.2 (smartcardLogon)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.6 (nt5Crypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.9 (rootListSigner)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.10 (qualifiedSubordination)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.5 (caExchange)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.7 (oemWHQLCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.1 (certTrustListSigning)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.2 (timeStampSigning)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.13 (lifetimeSigning)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.6.2 (licenseServer)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.6 (keyRecovery)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.11 (keyRecovery)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.6.1 (licenses)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.7 (ipsecUser)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.6 (ipsecTunnel)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.5 (ipsecEndSystem)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.4.1 (efsRecovery)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.4 (encryptedFileSystem)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.8 (embeddedNTCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.12 (documentSigning)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.19 (dsEmailReplication)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.5.1 (drm)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.3 (codeSigning)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.1 (enrollmentAgent)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://metadir.migros.ch:389/cn=migros_ca_class1,o=migros,c=ch'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0061400705dc557a27e3cda7f2ef5d1181816de1e8614099aac6ab8f60085c72dc40253d17964b2149860060b1089beea62ad2bde8f83a384355b9987f05d15adc07200246dcb10058b2603d5ca42bbde18c32c319e3397c9d5610a94b1b0e39132a9b198d9542d72735e2521bb454b60af488992cd993c93f08384b67ff7c165a6613a9878657f4ecac6693184e42f4eaeaab8fbad03b4d747e4d5f518e606e28b3c3b4c53286bcf05bdc37c906c25126652096b3abd887ea44c1a62cbbeda79b91547170aa76d38df24cdf6677b2ee0b717c14dfd6cb5d430a9220739eb30ed49b02f6f2282d0227c26f7a2fb9c1f22dda007ac83128e087955efb6a188c2863