lumimart.ch

- Coop Genossenschaft -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 7c:bf:28:9c:ff:ad:49:b5:ea:8d:98:18:cf:4f:4f:83:83:98:7a:bf was issued on by QuoVadis Limited.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Coop Genossenschaft

Organization: Coop Genossenschaft
Organization unit: Informatik
State / Province: BS
Locality: Basel
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:bf:28:9c:ff:ad:49:b5:ea:8d:98:18:cf:4f:4f:83:83:98:7a:bf
Serial Number (int): 712177835830414861411678551799562822838665116351
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 77:df:17:66:8d:51:66:6d:42:1f:96:fb:0a:3f:74:78:63:ee:6a:db
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): 7d:18:ab:d9:ef:bc:88:a9:8c:e5:d9:7c:5e:2e:a7:3d:f7:a3:24:a2
Fingerprint (sha256): 0f:82:cd:16:96:8b:0d:18:c7:02:bc:11:67:fe:02:ea:b1:29:de:a6:9b:2e:ff:04:7d:45:d5:9b:5d:3f:07:fe

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate lumimart.ch

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lumimart.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lumimart.ch
www.lumimart.ch
img.lumimart.ch
www-r16.lumimart.ch
img-r16.lumimart.ch
static.lumimart.ch
www2.coop.ch
www.coop.ch

Other certificates including the domain name lumimart.ch

(limited to 100 certificates)
collab01.coop.ch
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san166.exacttarget.com
lumimart.ch
gewinnen.livique.ch
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
imgt.lumimart.ch
Wartung-r18.coop.ch
san-12-s50.tlsprovisioning.exacttarget.com
wartung.coop.ch
san-12-s50.tlsprovisioning.exacttarget.com
gewinnen.livique.ch
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san166.exacttarget.com
*.lumimart.ch
test-r16.lumimart.ch
Wartung-r18.coop.ch
wartung.coop.ch
Wartung-r18.coop.ch
view.nl.lumimart.ch
Wartung-r18.coop.ch
Wartung-r18.coop.ch
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
akamai-san166.exacttarget.com
test.lumimart.ch
san-12-s50.tlsprovisioning.exacttarget.com
img.lumimart.ch
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
collabcluster01.coop.ch
lumimart.ch
san-12-s50.tlsprovisioning.exacttarget.com
gewinnen.livique.ch
san-12-s50.tlsprovisioning.exacttarget.com
Wartung-r18.coop.ch
akamai-san166.exacttarget.com
www.lumimart.ch
wartung-r18.coop.ch
san-12-s50.tlsprovisioning.exacttarget.com
wartung.coop.ch
Wartung-r18.coop.ch
collab01.coop.ch
backend.lumimart.ch
qual-r16.lumimart.ch
san-12-s50.tlsprovisioning.exacttarget.com
*.lumimart.ch
test-r16.lumimart.ch
wartung.coop.ch
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
test.lumimart.ch
Wartung-r18.coop.ch
wartung-r18.coop.ch
gewinnen.livique.ch
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
www.lumimart.ch
san-12-s50.tlsprovisioning.exacttarget.com
www.lumimart.ch
wartung.coop.ch
akamai-san166.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
gewinnen.livique.ch
Wartung-r18.coop.ch
san-12-s50.tlsprovisioning.exacttarget.com
wartung-r18.coop.ch
lumimart.ch
wartung.coop.ch
Wartung.coop.ch
www-r16.lumimart.ch
san-12-s50.tlsprovisioning.exacttarget.com
qual-r16.lumimart.ch
san-12-s50.tlsprovisioning.exacttarget.com
gewinnen.livique.ch
test.lumimart.ch
wartung-r18.coop.ch
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
san-12-s50.tlsprovisioning.exacttarget.com
backend.lumimart.ch
img.lumimart.ch
test.lumimart.ch
Wartung-r18.coop.ch
san-12-s50.tlsprovisioning.exacttarget.com
qual-r16.lumimart.ch
www.lumimart.ch
wartung-r18.coop.ch

Certificate

The complete raw certificate details for lumimart.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4fcbiuRjmu7GmVCnx+e
QTiUoYYYZwPuw4+jeqxUOado+7pVjQ1WacX0bnZUQ4t6GOls18Dunoz/8AseeJHQ
9Oth2Y/2nMUVumfcAJ6ULkZV30bpkCd7ciUB1F4flcw76HHh5dKoqR6cCC7H2EPm
xu5WnoPpOk5DmT92ewRsm3aRUOsnCTx7ezZkaIbKvLx2sTQiKapu4E9Htbbe4UKI
2Sb3ZOuhOpOElxP/qBMgIKnpaw3K9ObVyaqC6zsgpMGlhGzr2Zs3UafTsOgM6Keg
BUqpaXq6Yz5WcK3xBrdioOrkb82NdmJX6JgJbf68PiJXdISlfuu9r/ILGiF4i9Bj
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 712177835830414861411678551799562822838665116351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-04 07:47:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 07:47:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coop Genossenschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Informatik'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lumimart.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26198324711678738144769394137510240647453588417318137779692860012757203470778004078243256442417851612595043010243984093892753491931681364248094558187535046562226306197925553342163559871859259244408125029877029487446227393732389331104134680927530650097726865096289610135051880049102413208497024143766275530453622753629690992078278268584868675045852455129376279825414313296772630625808069980026479186235055796997547788564648246157324012970036339683199814972300949465486742411506800251746622831080240428096756737958477869533238213433659157038333937320224621373422819372947711706530828732469053465573576101451525136606051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (139 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumimart.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumimart.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.lumimart.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-r16.lumimart.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img-r16.lumimart.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.lumimart.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.coop.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coop.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77df17668d51666d421f96fb0a3f747863ee6adb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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