epass.migros.net

- Migros -

Issued by Migros CA Class1

About this certificate

This digital certificate with serial number 12:e1:78:b9:00:00:00:00:43:fb was issued on by Migros.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Migros

Organization: Migros
Organization unit: SERVER
Country: CH

Migros

Organization: Migros
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 12:e1:78:b9:00:00:00:00:43:fb
Serial Number (int): 89161813092393505801211
Serial Number lenght: 77 bits, 10 octets

SubjectKeyId: 64:1e:f6:32:38:3f:eb:6f:4e:52:8b:cf:d9:71:fe:e5:01:6d:b8:47
AuthorityKeyId:

Fingerprint (sha1): f7:9d:a0:74:26:26:41:38:aa:fa:55:60:24:0c:e1:02:6e:a9:c6:07
Fingerprint (sha256): 07:5c:ae:7c:58:30:75:02:71:30:4a:08:57:7d:96:ec:69:1f:62:69:1b:b6:0a:e7:a3:10:c2:03:28:41:f1:8b


Revocation information

CRL Distribution Point: ldap://metadir.migros.ch:389/cn=migros_ca_class1,o=migros,c=ch

Check the revocation status for certificate epass.migros.net

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epass.migros.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Time Stamping
Email Protection
IPSEC User
IPSEC Tunnel
IPSEC End System
Code Signing
Client Authentication
Server Authentication

Extensions

4 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name migros.net

(limited to 100 certificates)
ts.mobile.migros.net
ukasolutions-migrosindustrie.migros.net
live.dev.image-upload.mdb.migros.net
idm-qual.migros.net
parkcontrol.migros.net
ext-pi.migros.net
sfd.migros.net
kuva-test.migros.net
staging.prod.pema-coupons.mdb.migros.net
awds.migros.net
qim-appl-supp.migros.net
wsdwh.migros.net
qual.sfd.migros.net
svn.cwi.migros.net
jira.migros.net
artikelstamm.migros.net
d21.mindustry-test.migros.net
q-bw.migros.net
sts.migros.net
m-packaging-bw06.migros.net
wp2.migros.net
test-bivrost.migros.net
staging.qual.mam.mdb.migros.net
neops.migros.net
pim-supp-qual.migros.net
m-packaging-bw04.migros.net
zeugnis.migros.net
zeugnis-sts.migros.net
streaming.migros.net
mcds.migros.net
mlsplus-s.migros.net
mlsplus-t.migros.net
dsapbemignept.migros.net
ltopex-supplier-test.migros.net
sim-report.migros.net
owa.migros.net
intranet.migros.net
smslogin.migros.net
accountant-mpay.migros.net
d-onemindsolman.migros.net
api.idm.migros.net
sso-maps.migros.net
industry-test.migros.net
qual.ts.mobile.migros.net
assets.migros.net
image-upload.mdb.migros.net
finanzarchiv-test.migros.net
epass.migros.net
p99.migros.ch
sapp22.migros.net
sfd.migros.net
p58.mindustry.migros.net
mls-connect.migros.net
ra-sense-test.migros.net
outlook.migros.net
mobilemaps-q.migros.net
ewf.migros.net
d-hr-portal-d30.migros.net
lb-service-url.migros.net
pim.migros.net
hr-portal-p30.migros.net
q-mepcis.migros.net
voucher.migros.net
staging.dev.pema-coupons.mdb.migros.net
login-corp.migros.net
api.commit.migros.net
tagetik.migros.net
parkcontrol.migros.net
octane-uboot.migros.net
cumulus.migros.net
assets.migros.net
helpline.prod.migros.net
obsonis.migros.net
pos-upload-test.migros.net
staging.prod.kms-portal.mdb.migros.net
srm.migros.net
pim-q.migros.net
ctx.migros.net
mura.migros.net
boe.q-bw.migros.net
oas-con.migros.net
login-azure.migros.net
dataintegrationhub.migros.net
d-hr-portal-d30.migros.net
qim-q.migros.net
migros.net
transfer.migros.net
pmls.migros.net
group.m-mobile.migros.net
test-mlsplus-help.migros.net
d-rechnungswesen.migros.net
idm.migros.net
sim.migros.net
ltopex-supplier.migros.net
login-schadenportal.migros.net
ra-sense-test.migros.net
suppliernet.migros.net
migrosticino.migros.net
integ.migros.net
login-schadenportal.migros.net

Certificate

The complete raw certificate details for epass.migros.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto+79Oz9AuqVLGo47PAy
ek6xwSq2dyQDGoVM7fBm0mCv6/85wlW1xmPzXp7O0Ta2exqrImOtr69KugThk5ln
K81co7l8QqFcdDcpYAjCzWE4mx3evLJOtVKoH57isFVnLg6UEj399bRqNClC+VVp
yK7CK/41O45Zbh7cNIYDbSwdnxX+07I+qHZfe5K0gv6gD0MgK+v9vYVZ7jlnBfPP
6n2ccqP38wlcjAtaL0FliivHnsOpdvh9wb29h65NnBvRLVWDWpJmiSjuQGxmVDri
qzr3tsFv5mvlG9MY2FNsRlmu2ozTMIfn0BeQtdLrXmDrRS8DxiOM336eQN49MrEa
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89161813092393505801211
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Migros'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Migros CA Class1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-04-07 08:17:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-06 08:17:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Migros'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SERVER'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epass.migros.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23046249482469639001227349297369165127885790090004394065257222743901188666449687019990829674438414360529611091344785325329405102026792285250544222957677994191956392499309451989218689978683390655513245626609502212422277416414582810006514925135541399114968483512548801163657990342656155122507879099337950268796349351970468577552318972220847731116294682051204236499937739272191846834559855951341879413441722399053551364825407858371061281080677531670359112730618557742501000556261072307642541255054097181085504985981483206386008271373979823588604143300087635457521299198888482800958557286166554937711453360244362704919241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							641ef632383feb6f4e528bcfd971fee5016db847
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (344 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.5 (whqlCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.8 (timeStamping)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.2 (smartcardLogon)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.6 (nt5Crypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.9 (rootListSigner)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.10 (qualifiedSubordination)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.5 (caExchange)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.7 (oemWHQLCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.1 (certTrustListSigning)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.2 (timeStampSigning)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.13 (lifetimeSigning)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.6.2 (licenseServer)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.6 (keyRecovery)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.11 (keyRecovery)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.6.1 (licenses)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.7 (ipsecUser)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.6 (ipsecTunnel)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.5 (ipsecEndSystem)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.4.1 (efsRecovery)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.4 (encryptedFileSystem)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.8 (embeddedNTCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.12 (documentSigning)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.19 (dsEmailReplication)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.5.1 (drm)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.3 (codeSigning)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.20.2.1 (enrollmentAgent)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://metadir.migros.ch:389/cn=migros_ca_class1,o=migros,c=ch'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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