epd-prod.thurmed.ch

- thurmed AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 1e:c6:38:10:ed:07:15:ec:2f:c1:9c:db:b5:d5:96:62:8b:04:8c:3d was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

thurmed AG

Organization: thurmed AG
State / Province: TG
Locality: Frauenfeld
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:c6:38:10:ed:07:15:ec:2f:c1:9c:db:b5:d5:96:62:8b:04:8c:3d
Serial Number (int): 175690154721618124140108709514253879919595785277
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: ea:e8:91:90:7f:ac:b3:2e:7c:5a:eb:d3:1d:ce:90:e8:99:f2:aa:81
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): e9:db:76:e1:8b:e0:d9:ae:c3:8a:c7:dc:a3:c8:c6:0b:02:e2:e1:70
Fingerprint (sha256): 12:f9:cf:cc:95:37:9d:1c:d8:e4:d4:e2:bf:20:c8:7e:a1:5d:35:f0:49:c4:19:06:da:ba:08:f9:c1:68:87:d0

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate epd-prod.thurmed.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epd-prod.thurmed.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

epd-prod.thurmed.ch

Other certificates including the domain name thurmed.ch

(limited to 100 certificates)
am.thurmed.ch
af.thurmed.ch
epd-prod.thurmed.ch
am.thurmed.ch
af.thurmed.ch
af.thurmed.ch
af.thurmed.ch
aft.thurmed.ch
epd-prod.thurmed.ch
epd-prod.thurmed.ch
expe.stgag.ch
epd-test.thurmed.ch
af.thurmed.ch
aft.thurmed.ch
stgag.ch
expe.stgag.ch
af.thurmed.ch
amt.thurmed.ch
epd-prod.thurmed.ch
amt.thurmed.ch
epd-test.thurmed.ch
stgag.ch

Certificate

The complete raw certificate details for epd-prod.thurmed.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 175690154721618124140108709514253879919595785277
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-06 12:11:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 12:11:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frauenfeld'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'thurmed AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epd-prod.thurmed.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 535735957652646110497410414981601962834145281598934083586456833241300471254004902321121201078693367430840536679509749390988965080318584050206599634220243407043639479950547604182725306063063586231678527810434985422638637562602344642979952255736812246829546034086194237577154967688068035724612678287415463219408885481917685566142836051388572500421869573512116981663085016760002995605680720260422471934363467087846636322143739529176564164373606495144446841600609293490059360593340043384521910597876861587445934536608964815761517316082914729651071508324897860767799554014050618292142371047839281050591243869591286265017854760131447304081892132293196997018015958833611675172635500535055401081910469460012687112677864602590640189043106824248693337268417923745200153668073185623277537718721203025311352360136656430007109868921164293625534129004881038758758314368484560443282819712150313503336483564382671699368857191625057114140207927713634046239340854276394720856269955363333970420470097985568604223408846298109983585935515674156073200945765207557311315955169556793840927744597847982930540461502856970488999609161309341864348453023152191909778166511918663952812005882932579858628191831688838127903967605387568165449533704839613087743354897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epd-prod.thurmed.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eae891907facb32e7c5aebd31dce90e899f2aa81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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