webmail.brezelkoenig.ch

- Brezelkönig AG -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 72:03:01:77:b1:cb:61:bb:1b:74:b0:66:c6:e0:4d:48:57:c0:0a:a7 was issued on by QuoVadis Limited.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Brezelkönig AG

Organization: Brezelkönig AG
Organization unit: IT
State / Province: Luzern
Locality: Emmenbrücke
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 72:03:01:77:b1:cb:61:bb:1b:74:b0:66:c6:e0:4d:48:57:c0:0a:a7
Serial Number (int): 650891977951730266718034595573944340891840809639
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f8:ae:e1:83:94:80:12:f5:6d:62:8f:61:49:ef:23:9a:1a:4c:56:52
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): a8:5d:9b:41:b6:d7:5f:dc:ea:6f:f5:a3:de:da:64:31:d9:d7:6b:53
Fingerprint (sha256): 05:ab:92:71:d9:9a:ce:a1:0e:85:f6:94:59:f7:f6:6c:3d:ae:08:f9:6a:6f:a3:be:e7:6c:73:30:af:b3:a0:60

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate webmail.brezelkoenig.ch

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.brezelkoenig.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.brezelkoenig.ch
mail.brezelkoenig.ch
autodiscover.brezelkoenig.ch
brezelkoenig.ch
ssl.brezelkoenig.ch

Other certificates including the domain name brezelkoenig.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for webmail.brezelkoenig.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvxSGPSFW/6fsV54PJ6p
9a59zACziOQ5bVb0JGFg5fTSM7SUAAD2otvNiBQfL9njtya1YnPa2/pypzBH8ekw
MA3E45BnpmQYHz/AVSFCZDjZ3osByhEHivcJ5NTm4n8lf+oFrSWk9nHsKsT8GHhq
VM5ZNGNGUnzjwnYmH4CpTQY5924K8UElVEdmPn5GKsL0rNjJjYPo4B65VIVP5EsJ
rJWY+z29KBa2Icq+yK75j0fUKQg9YaM4tDELcTt/fOB8HMGlwAx3MqlvI5In+Z4P
4RJ9VpENyjaQb1KEeS90tG7BClxiXZnZHQ9m16H92JBADDQVHrCo13cdWesQsxyw
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 650891977951730266718034595573944340891840809639
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-14 08:16:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-14 08:26:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Emmenbrücke'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brezelkönig AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'webmail.brezelkoenig.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24614655134619376377345723850248398624300178810117675029203714004547188520011826880509672082716652618306495862631814258595820880876094248957164051595309739446113350883579346572021942782344712837595808445205515247016320233055400658922982683785768333050241834374180613394169357129631373379256803617573319381676717362178701688395904020480554297094863621606650989447284072448155380014177730003610982821942646406358873470833149738573649635515292669369922296796921594193026753326828238372725315970099965760361098731366950175768745426707175246675342092348102147793012253861468136477340087461005226941150211953827206506786909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.brezelkoenig.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8aee183948012f56d628f6149ef239a1a4c5652
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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