remote-access-dev.sartorius.com

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 0c:1f:76:72:2f:8b:36:2b:6b:7f:13:d3:8a:c5:2e:f3:80:9a:f4:69 was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=remote-access-dev.sartorius.com

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:1f:76:72:2f:8b:36:2b:6b:7f:13:d3:8a:c5:2e:f3:80:9a:f4:69
Serial Number (int): 69209530456166844059699965872489096831391429737
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: ad:61:3a:db:93:a9:5b:4c:aa:2d:ca:69:89:c9:5d:d6:df:6c:52:22
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): df:d5:21:9e:ca:87:7f:85:c9:be:73:87:94:dc:5a:f1:7f:31:da:2d
Fingerprint (sha256): 17:09:07:4c:62:52:50:dd:93:4a:21:78:bd:2a:21:bf:f9:4b:bf:2c:27:7b:e0:e9:3a:1d:6e:c7:28:3c:1f:ed

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate remote-access-dev.sartorius.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for remote-access-dev.sartorius.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

remote-access-dev.sartorius.com

Other certificates including the domain name sartorius.com

(limited to 100 certificates)
cert00068-azurecdn.akamaized.net
go.sartorius.com
owa.sartorius.com
sentry-c1.sartorius.com
btconfigurator-dev.sartorius.com
sentry-access.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
dam-qa.sartorius.com
api-internal.sartorius.com
eshop.sartorius.com
api-qa.sartorius.com
owa.sartorius.com
de05bwinterfacetest.sartorius.com
*.scp.sartorius.com
open-access.sartorius.com
*.scp.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
su-adp-presentation.sartorius.com
open-access.sartorius.com
configurator-training.sartorius.com
www.shop-wer.de
shop.sartorius.com
dam-qa.sartorius.com
www.sartorius.com
ecoach.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
dam-test.sartorius.com
cert00068-azurecdn.akamaized.net
upload.sartorius.com
btconfigurator.sartorius.com
jira.sartorius.com
de91vaucxwye01.sartorius.com
*.portal-q.sartorius.com
git.sartorius.com
ecoach.sartorius.com
configurator-training.sartorius.com
verical.sartorius.com
developerqa.sartorius.com
remote-access-dev.sartorius.com
eshop-qa.sartorius.com
sip-mobile.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
developer-qa.sartorius.com
sce-experlogix.sartorius.com
cert00068-azurecdn.akamaized.net
config-data-downloads.sartorius.com
go.sartorius.com
uc-gw.sartorius.com
*.sartorius.com
btconfigurator-dev.sartorius.com
sartdam.sartorius.com
brm.sartorius.com
btconfigurator-dev3.sartorius.com
cert00068-azurecdn.akamaized.net
bi-test.sartorius.com
gonsap68.sartorius.com
cert00068-azurecdn.akamaized.net
ir-reports.sartorius.com
brm.sartorius.com
developer-qa.sartorius.com
bioprocess-test.sartorius.com
config-data-downloads.sartorius.com
*.scp.sartorius.com
mobile-test.sartorius.com
cert00068-azurecdn.akamaized.net
btconfigurator-dev.sartorius.com
cert00068-azurecdn.akamaized.net
git.sartorius.com
dex.sartorius.com
serviceshop.sartorius.de
owa.sartorius.com
dam-qa.sartorius.com
www.connect-upstream.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
sartdam.sartorius.com
cert00068-azurecdn.akamaized.net
btconfigurator-dev2.sartorius.com
serviceshop.sartorius.de
open-access.sartorius.com
jira.sartorius.com
owa.sartorius.com
cert00068-azurecdn.akamaized.net
config-data-downloads.sartorius.com
cert00068-azurecdn.akamaized.net
bi-test.sartorius.com
studio.sartorius.com
www.shop-wer.de
Sartorius Corporate Administration GmbH
delivery.wcms.qa.sartorius.com
lps-globalsalesmeeting.sartorius.com
mobile.sartorius.com
developer.sartorius.com
login-test.sartorius.com
btconfigurator-dev3.sartorius.com

Certificate

The complete raw certificate details for remote-access-dev.sartorius.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKgupncOM78pA74jZKe+
gNsG0ielW4QPwofS81kr5OfEpOY1+yBR5g6p0j2m3oLpCgVZp5EQrfC8tubkBqWu
Fl3DRWtgVF5keKxf22qQ9r/XtKRTF7MBMSYzZvrZrYQTPg4Ifr4ewpEQAOBOTMIh
ysnaXijGBJjmrY5CQuMCBSEGVHaQ6kOX/3OU8NFdKweXrGqPLAUYCfApa2OcBWi0
bqXfqVWrdwBZw8+sd0CWbexjSv3WiADoGQMY+917MyeuqDtjuVNhugbXfY0jPx+8
Mrtd2tnBx1uZXJxSuicAj6KgZOm7spEIu2wYdz1FXRUePkM7QT92xBfjdi9Rx8J5
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 69209530456166844059699965872489096831391429737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 06:59:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 06:59:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'remote-access-dev.sartorius.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25330594740602310133806241644894318290280490464627682050196514622272856464082127773297378617850392520141182640231157674070445217298999539980934333692794914439637261043623602047616021835232868149354383036834062848170187072671556301593554446363753927179605552018718253259569877457847281777666194772482580428175624897464467171303009875047925330215823251208155063158638164831689751827280101641944665400307450563831056964331464058475871760466571557789838920621720748236470568812715516124329050212664063598222158212086802668303171069983714028678543150195839592452577009792046041557421363885672146014447847219038135664146761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote-access-dev.sartorius.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad613adb93a95b4caa2dca6989c95dd6df6c5222
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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