portfolio.switch.ch

- SWITCH -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:c6:f3:0c:b9:dd:8c:7f:e7:af:58:22:13:a4:e5:da was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SWITCH

Organization: SWITCH
Locality: Zurich
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:c6:f3:0c:b9:dd:8c:7f:e7:af:58:22:13:a4:e5:da
Serial Number (int): 3691460403353928057164151818541131226
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: bf:2a:67:ee:83:06:54:22:c1:9d:5f:fe:4f:32:04:a6:c0:77:dd:af
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 92:73:e1:29:9d:ba:9c:e6:47:70:43:36:51:0e:ee:46:0f:c2:4f:0a
Fingerprint (sha256): 13:7d:97:b3:81:10:56:d5:fd:7c:b5:ac:ce:22:4a:9d:85:95:47:ee:16:fb:03:56:ae:cc:1e:04:38:68:b2:5e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate portfolio.switch.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portfolio.switch.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portfolio.switch.ch

Other certificates including the domain name switch.ch

(limited to 100 certificates)
hsr.meet.switch.ch
point.switch.ch
wiki.smap.switch.ch
discourse.toolbox.switch.ch
collab-fms-test.switch.ch
kelimutu.switch.ch
tls.automattic.com
vico.switch.ch
zeus.switch.ch
parma.switch.ch
fl-0-51.zhdk.cloud.switch.ch
ssad.events.switch.ch
placement.api.s2.scloud.switch.ch
evct.ssl.switch.ch
unibas.meet.switch.ch
grafana.int.os-ls.kaas.switch.ch
*.s3-zh.lts.switch.ch
tls.automattic.com
zhaw.meet.switch.ch
neutron.api.s2.scloud.switch.ch
testsp.tw.switch.ch
portal-dev.switch.ch
landingpage.rpz.switch.ch
trust.aviareto.aero
mail.switch.ch
player.cast.switch.ch
test.toolbox.switch.ch
domain-pulse.at
intern.meet.switch.ch
zeus.switch.ch
influxdb.cast-test.switch.ch
glance.api.unil.cloud.switch.ch
producer.cast.switch.ch
filesender.switch.ch
staging.groupie.lard.switch.ch
unili.meet.switch.ch
backend.www.switch.ch
vcregister.switch.ch
kava-admin.cast.switch.ch
worker3.oc-test.switch.ch
alphubel.switch.ch
drive-backup.switch.ch
engines-admin.scloud.switch.ch
*.os.zhdk.cloud.switch.ch
www-test.switch.ch
monitor.switch.ch
wayf.switch.ch
teramac.switch.ch
tls.automattic.com
node21.webauthn.eduid.ch
forge.switch.ch
cast-ng.switch.ch
www.switch.ch
test.id.switch.ch
os.unil.cloud.switch.ch
wayf-test.switch.ch
aai-logon.switch.ch
tls.automattic.com
landingpage.mw.rpz.switch.ch
contracts-test.switch.ch
driveonlyoffice.switch.ch
portfolio.switch.ch
fl-6-178.zhdk.cloud.switch.ch
octavia.api.s1.scloud.switch.ch
cloud-id.switch.ch
portal-dev.switch.ch
status.dilercloud.com
player.cast.switch.ch
bonseyes.zhdk.cloud.switch.ch
cloud-id.switch.ch
tools.aai.switch.ch
download.cast.switch.ch
tools.switch.ch
www-dev.switch.ch
admin.oc-test.switch.ch
www-dev.switch.ch
wayf-test.switch.ch
test.idph.switch.ch
bfh.meet.switch.ch
urlanalyzer-staging-backend.misc01.k8s.cert.switch.ch
password.switch.ch
idp-monitor.aai.switch.ch
saqcnfbe.events.switch.ch
cr.gitlab.switch.ch
*.lts.switch.ch
kava-admin.cast.switch.ch
unibe.meet.switch.ch
domain-pulse.at
bonseyes.zhdk.cloud.switch.ch
wiki.smap.switch.ch
producer.cast.switch.ch
tls.automattic.com
switchnovember.events.switch.ch
*.sandstorm.cloud.switch.ch
portfolio.switch.ch
metadata-test.aai.switch.ch
kelimutu.switch.ch
presentation.cast.switch.ch
mirror.cloud.switch.ch
srp.switch.ch

Certificate

The complete raw certificate details for portfolio.switch.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UVCcy44lZXM50aryUmJ
6ByHiMw4holgrm4FeVap4/6VPMzJM5o29shgaPvo2Yo0z87L0/F+dCCDrJP4up3Z
S7+/XPazu/58Stie0GvMe7NoHPDwDW3eu8ZmVcHOLfSRX/yfoPWWu+l2moQLls0w
mAuLDNr0Ao4uzgqhXrdokn+ILsoKcwJclloHSr7j09FGGQFv1J8WeENGdrOJjOQg
d3Huv8lfOrBzdgnwoihEPr/mFicdKyZFKUEdhUQtwboCrZYkUPsM8xKbB3Rt369T
Aovzs7syCeyX+qeyYwRBJ03bN3EZWQsBGXA9CtSlaMyDN2GrecqeO31O/ZB2ik0E
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3691460403353928057164151818541131226
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SWITCH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portfolio.switch.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27427865344515439255227887097208217650489210273305334908461687200644284890022351946598767463360454123613564050522224328907968460693066173160792627072155326087293184779377646949560870858146457566588287591755792516852771626306883196308663565940986892081584968552344947473650623406650034200531739600023452062859366944238403574269379016441526908573678125595772618867677799373257776542246802683796820457881847019153904003728882773661110098372801562387291874833222342479473384932892030661795726333072942386322942159165480574651153312414602287619940088466357748284357297355110071102113345430650487704113499214897303088071757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf2a67ee83065422c19d5ffe4f3204a6c077ddaf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.switch.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018a1be45d2b00000403004830460221008d1248b84af08f84ee5bddbeaeefa635a0ef8e03ffcd71ce8f260bde55aa3afa022100b7c3a0eafb0839322b182f9064369a870b93fa0aa8455526e66900490e6a85bd00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018a1be45d1a0000040300473045022100fbdb7357d15f90fab7734e6bb4e5ce6c10a4c6ae7444ec62d9b530f9a934b0fd02203cd499ca2a8d1ce0769e9d1da9121397f0cc3b95f730533fda269a01f4b32e29007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a1be45cd3000004030047304502201fa5605610964629c884bd21f128cf7ae7fb27a41f462dda4e5495c4dd9968d20221008e71275a61401d02c96eaf63f287e31833a2978a8acbaca92ed78464f325bf1c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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