portal-test.coop.ch

- Coop Genossenschaft -

Issued by Coop System CA 1

About this certificate

This digital certificate with serial number 27:c0:3e:4a:00:00:00:00:0e:9c was issued on by Coop.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Coop Genossenschaft

Organization: Coop Genossenschaft
Organization unit: Informatik
Country: CH

Coop

Organization: Coop

This certificate has expire since

Certificate Details

Serial Number (hex): 27:c0:3e:4a:00:00:00:00:0e:9c
Serial Number (int): 187718556094047025368732
Serial Number lenght: 78 bits, 10 octets

SubjectKeyId: 2d:02:33:81:36:40:ae:c5:dc:98:fb:a5:4c:82:54:94:e5:84:55:c5
AuthorityKeyId: 61:47:25:e3:77:ff:5a:c2:2d:ef:7d:c3:2f:ba:f5:13:2d:80:0f:7b

Fingerprint (sha1): fd:fe:33:c4:8a:e2:9d:2f:fd:ee:63:16:0c:df:17:3b:3c:fb:86:4c
Fingerprint (sha256): 05:79:1e:6c:b5:87:63:34:fe:c5:b1:b6:9d:a5:33:aa:93:d7:53:af:27:3a:1e:f4:fd:6b:57:e9:2d:36:c7:e4

Issuing Certificate URL: http://aia.coop.ch/CoopSystemCA1.crt

Revocation information

CRL Distribution Point: http://crl.coop.ch/CoopSystemCA1.crl
CRL Distribution Point: ldap:///CN=Coop%20System%20CA%201,CN=svrm1pkica01,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=coop,DC=ch?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate portal-test.coop.ch

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal-test.coop.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal-test.coop.ch
sm-test.coop.ch
hr-test.coop.ch
srm-test.coop.ch

Other certificates including the domain name coop.ch

(limited to 100 certificates)
www.bauundhobby.ch
contentimages-test.coop.ch
tracking.coop.ch
www.photo.coop.ch
coopcontent-test.coop.ch
www.marche-restaurants.ch
mymail.coop.ch
kampagnenarchiv.coop.ch
svrchr02.hs.coop.ch
photo.coop.ch
tracking.coop.ch
mdm-t.coop.ch
bpm.coop.ch
view.politik.coop.ch
webedi.coop.ch
werbemittel.coop.ch
click.news.coop.ch
collab01.coop.ch
callback.coop.ch
mtonline.coop.ch
collabcluster01.coop.ch
hz.coop.ch
labelscms.coop.ch
sfe.coop.ch
neu-test.coop.ch
www.bauundhobby.ch
author-coopilot.coop.ch
www.photo.coop.ch
portal-test.coop.ch
cemeasy.coop.ch
recruiting-test.coop.ch
pypi.hs.coop.ch
san-14-s50.tlsprovisioning.exacttarget.com
mdmdevice.coop.ch
neu.coop.ch
coopcontent.coop.ch
san-11-s50.tlsprovisioning.exacttarget.com
streaming.coop.ch
ziegenpatenschaft.ch
partnerweb.coop.ch
asa.coop.ch
fooby.ch
geschenkkarte.coop.ch
cmscontent.coop.ch
www.photo.coop.ch
san-11-s50.tlsprovisioning.exacttarget.com
mdm.coop.ch
san-11-s50.tlsprovisioning.exacttarget.com
www.coop.ch
thm.coop.ch
coopcontent-test.coop.ch
gefahrengutdb.coop.ch
svrcuc02.hs.coop.ch
pcs.coop.ch
contentimages.coop.ch
servicetrace.coop.ch
www.photo.coop.ch
pcs3.coop.ch
myiscan.coop.ch
fooby.ch
*.hz.coop.ch
mdmext-t.sz.coop.ch
san-11-s50.tlsprovisioning.exacttarget.com
san-11-s50.tlsprovisioning.exacttarget.com
ral.coop.ch
mymail.coop.ch
xmasapi.coop.ch
srm.coop.ch
multiterm.coop.ch
www.coop.ch
webadmin-prod.coop.ch
epaper-test.coop.ch
datascout.coop.ch
mlogfust.coop.ch
coopcontent.coop.ch
secureeastest.coop.ch
sachmittelshop.coop.ch
www.coopathome.ch
ccb.coop.ch
test-coopcontent.coop.ch
svrcxc02.hz.coop.ch
app.railcare.coop.ch
akamai-san166.exacttarget.com
gefahrengutdb.coop.ch
jobs.coop.ch
trophy.coop.ch
lumimart.ch
password.coop.ch
pages.nl.coop.ch
mymail.coop.ch
grill.coop.ch
adventskalender2016.cooparchive.cust.adfinis-sygroup.ch
mobile2003.coop.ch
gz.coop.ch
privacy.onetrust-test.coop.ch
pcs6.coop.ch
spielwaren.coop.ch
neu.coop.ch
www.halalgo.jp
sponsoring.coop.ch

Certificate

The complete raw certificate details for portal-test.coop.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSsx3PP77+x47RFStuTb
QTt2YrrRvYvQ9Cfx5cQU6b50JbN9wk/HQksuIHWbrhLZEdSJO4MFIjee/mTK4n8D
NHmyt0/3hUGXO66ZgqTcdzScRyqdlqJyJNwyEyBsF9LR7qNGMe18/R57EcZeWUt6
xSMDnWDeTQ6Mid4dvYpxWwUCWutCDlWTWd9aAq5urFAKZrGcN+wNZSC9Xsm5PU3z
XkG3Gu/EwRrJ2iTgAvbwRT7CHwXknPGKg/dA1t0L0ZRyUqsXCB8sj74FtxV1IOTf
wDOrcrni8RVfjdT0t5QK/0mV5JE7vaSJ5Cgrqj8YByZkiGl4yxcbElu3pHVZ9XHx
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 187718556094047025368732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'Coop'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coop'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coop System CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-03-19 12:16:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-19 12:16:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coop Genossenschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Informatik'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal-test.coop.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24385292997213137417629447673904399881431808298585253851275645140429666067817983353460314994646333744370263933317864463592797658671517251671920362440615263103167786895011703121606872498527827987024807854521440824730860294261354650347466182005163145706604980762473605355489294250938588189674968066738241931314917330362592842047934952309980897648081150361747797069048053809057743815331563272273217417683774735180855422232841060239131712031872178759329071094211886263417911083586977028663781199654187045692314024223677986649912471406090507415251841492492408503148396501554157821431326537642384228249557588259282265174457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-test.coop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sm-test.coop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr-test.coop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srm-test.coop.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2d0233813640aec5dc98fba54c825494e58455c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 614725e377ff5ac22def7dc32fbaf5132d800f7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.coop.ch/CoopSystemCA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap:///CN=Coop%20System%20CA%201,CN=svrm1pkica01,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=coop,DC=ch?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.coop.ch/CoopSystemCA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.16548294.16056542.936083.7780892.13598948.31.24907.5739568
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4020.0.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.coop.ch/pki'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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