asg.meyer-spinnler.ch

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 65:9f:d4:34:3f:be:c0:8a:9d:21:28:66 was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=asg.meyer-spinnler.ch,OU=Domain Control Validated,C=CH

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 65:9f:d4:34:3f:be:c0:8a:9d:21:28:66
Serial Number (int): 31451207302792958549201856614
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 1d:33:02:d6:fd:a1:08:2c:11:6e:94:6e:01:3c:03:e2:fb:f8:c5:42
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): ad:57:21:e9:51:46:56:26:56:fc:a7:d2:08:4a:18:6c:cd:bf:ac:87
Fingerprint (sha256): 14:05:89:7e:89:c8:27:c6:f2:95:df:e4:e3:a0:ec:ac:35:7a:8d:3a:be:86:02:7e:14:41:c5:b8:8f:63:35:1f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate asg.meyer-spinnler.ch

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for asg.meyer-spinnler.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asg.meyer-spinnler.ch
mail.meyer-spinnler.ch
autodiscover.meyer-spinnler.ch
www.meyer-spinnler.ch

Other certificates including the domain name meyer-spinnler.ch

(limited to 100 certificates)
*.meyer-spinnler.ch
meyer-spinnler.ch
meyer-spinnler.ch
asg.meyer-spinnler.ch
re-center.ch
meyer-spinnler.ch
meyer-spinnler.ch
alpavert.ch
asg.meyer-spinnler.ch
meyer-spinnler.ch
meyer-spinnler.ch
meyer-spinnler.ch
meyer-spinnler.ch
meyer-spinnler.ch
meyer-spinnler.ch
re-center.ch
*.meyer-spinnler.ch
alpavert.ch
meyer-spinnler.ch
meyer-spinnler.ch
re-center.ch
meyer-spinnler.ch
meyer-spinnler.ch
meyer-spinnler.ch
alpavert.ch
meyer-spinnler.ch
meyer-spinnler.ch
portal.meyer-spinnler.ch
meyer-spinnler.ch
asg.meyer-spinnler.ch
meyer-spinnler.ch

Certificate

The complete raw certificate details for asg.meyer-spinnler.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvfXJXDFgS50PQni69EJ
dY+qMOkfwk5OgmpW0MV3sRKx+sjJmJYo9vv2bkz8klz4xnrrpcesc8WqaqJCJ+P2
7P1zGdNugz1SVllBYVIiU+92deb1Fq/v4yWZdd+Q6Z6Qf3LoAHG6EhtpGzst0adI
ddVYF4GZJyocRe6ZWZPWcqtFwxCoFHezuOkcmeoS5FZvy48WZ4GnzHHfAYcaD0sn
bre8ato4j3+Rw4fXjFUnMB/XvYi3ciSMUceqko3n7wTdNWJJ8vFlTLm51k0YwK8R
P6jv8H6g9PIJBk6EzHByiLzakTvQ+dZYg6Vt35RA/DpjXSUfWR3SDhrZIctSRK21
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31451207302792958549201856614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-26 10:59:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 10:59:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'asg.meyer-spinnler.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18553007188707079120407103834931384022150918676917574776774454763844673942751679259163485849488068876689859527546437897070381334460051055716195982215864574515759175370512625163829425147876596550533862036834139957085187471601330599957853394569511860270470086872240440221768032380682486671036843861440499722034498428939640389965346865068964277860760062063616375212387632979700346063416615794072029134287979608231465914009726925636105176038842667793117457117020744958647108716614892414561321804102785949814662565122585125334413615854151859732520120238741399614100977181936783157111107607566127541337463126620552033056183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asg.meyer-spinnler.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.meyer-spinnler.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.meyer-spinnler.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meyer-spinnler.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d3302d6fda1082c116e946e013c03e2fbf8c542
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							02580077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015b0a45a20a0000040300483046022100c15e87fe3649cdb14b74e49465c68fd7fbca1abb9ad8712944d6f4abf9a4952b022100c5f29ce7560b6f8839c6acdf761e894d65ad5560b8eaf0e5153e2d6c446c1112007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015b0a45a22f00000403004630440220382b24c00229e4021efe8f4c2a7e174ebe3fd5874bc9e066d1d8f2e8773bd60a022059b9a8cea98da95e856fde1c1f2822ff53473eed99ac2c807e28b2dce9c6bad7007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015b0a45a317000004030047304502201c97aa0ed7f4a8618f67b5d234ae48132d405d1267feacaf0ce2ca0f3cd36272022100bbfc7e76b4dbf181f46269ac9628aa46590de012b2ae5745eb219b4888a5d9b9007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015b0a45a1f80000040300463044022074876d073eab59027eac575d064b64b57b15e0b58b97acd05dc2f7bb1b5d318e02206f6023d6bd98ef9c67f6b9532c45a0058db5b6331e1833529565ce64b24a3fdf007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015b0a45a4eb0000040300483046022100d6ad717b5153389e59c838f775fba8ffe3c721e3b37eaf350c37931e444380cf022100cef0d15e6ff2157cddf3cce00919fff2a020f4205dd02820d91502c02fe55b0c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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