outlook.ibsa.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 1f:d6:8f:fc:1d:55:28:55:ee:16:aa:2b:36:e9:38:69:b4:cf:3c:4f was issued on by SwissSign AG.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
State / Province: BE
Locality: Worblaufen
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:d6:8f:fc:1d:55:28:55:ee:16:aa:2b:36:e9:38:69:b4:cf:3c:4f
Serial Number (int): 181763616215059059610480176657015718509231946831
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: b8:29:0a:94:8b:d5:e3:26:9f:57:06:2c:4f:d5:42:de:05:48:1b:1d
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 5b:45:09:69:2d:60:f7:07:eb:8d:45:0d:a0:71:d2:89:13:1f:a6:21
Fingerprint (sha256): 19:00:7b:86:57:2e:b8:64:7e:c3:04:37:3d:9b:3d:dd:03:94:78:f5:da:2a:5d:97:53:f4:09:d8:b4:d2:cc:97

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate outlook.ibsa.ch

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for outlook.ibsa.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

outlook.ibsa.ch
sip.ibsa.ch
sip.bouty.it
sip.ch.ibsagroup.com
sip.ibsa.it
sip.ibsagroup.com
sip.it.ibsagroup.com
uccweb-lfe11.ibsa.ch
uccweb-lfe21.ibsa.ch
ucc.ibsa.ch
webconf.ibsa.ch

Other certificates including the domain name ibsa.ch

(limited to 100 certificates)
imperva.com
ibsa.ch
imperva.com
outlook.ibsa.ch
imperva.com
outlook.ibsa.ch
imperva.com
imperva.com
career.ibsa.ch
outlook.ibsa.ch
imperva.com
mailch.ibsagroup.com
mailch.ibsagroup.com
outlook.ibsa.ch
imperva.com
*.ibsa.ch
ibsa.ch
outlook.ibsa.ch
mailch.ibsagroup.com
imperva.com
outlook.ibsa.ch
imperva.com
link.ibsago.ibsa.ch
outlook.ibsa.ch
outlook.ibsa.ch
imperva.com
imperva.com
imperva.com
imperva.com
mailch.ibsagroup.com
outlook.ibsa.ch
imperva.com
mailch.ibsagroup.com
outlook.ibsa.ch
outlook.ibsa.ch
imperva.com
career.ibsa.ch
*.ibsa.ch
*.ibsa.ch
imperva.com
*.ibsa.ch
imperva.com
imperva.com
outlook.ibsa.ch
outlook.ibsa.ch

Certificate

The complete raw certificate details for outlook.ibsa.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 181763616215059059610480176657015718509231946831
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-26 06:29:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 06:29:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worblaufen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'outlook.ibsa.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 836983880722546392774819124978603715067803922043011138490853913469446883192098039710854685190167852557473407154875666006662589236939388196182606682939688665097414561551602910852981258887393057280727532695054108443456672673995333902316053240899474020058489861853085775609086023244638128983627675681839808037506241644931396180300097248088361212738407261409757762124495517903103555648831779021441273269546188774144146856387278214173210868422590299540357720104596404097833265632690462610977107415973521695073030769469386323993507154423848122112698058154388166270840625070120377838085257548152770598395097247146808624061761185092019691418559532514094924881508274388740756304634806279399493322365705525210145795393953614172344546569272237878568991074429336330625022095556907913346202221389761335328513138276943471336064717830290177734310143475022577179878514380382444518017141855245533492987036632954365960460945816690771206803012764599052085010772449953578064891365131763437735486670304018400817024650804262520095291082762181229611589271037713874802560683590561154995452765672090971537687546991666588290893969265961997549031787933610955763179542953356728385229434439904420084972305443645569466090918007787878641437254069877029597650235969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bouty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ch.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.it.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb-lfe11.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb-lfe21.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucc.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.ibsa.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8290a948bd5e3269f57062c4fd542de05481b1d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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