mi.avesco.ch

- Swisscom (Schweiz) AG -

Issued by Swisscom Rubin CA 1

About this certificate

This digital certificate with serial number fd:a8:96:4a:e8:85:cc:2c:2a:69:47:5e:ec:14:5d:33 was issued on by Swisscom.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
Organization unit: Mobile Device Services
State / Province: BE
Locality: Bern
Country: CH

Swisscom

Organization: Swisscom
Organization unit: Digital Certificate Services
Country: ch

This certificate has expire since

Certificate Details

Serial Number (hex): fd:a8:96:4a:e8:85:cc:2c:2a:69:47:5e:ec:14:5d:33
Serial Number (int): 337170037102104414282416982214571220275
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d4:fe:29:a2:76:8d:98:7a:0d:d3:08:0a:5c:b6:01:1d:22:7c:4e:80
AuthorityKeyId: 2d:c2:a7:a3:63:3e:3f:83:47:ab:48:33:36:81:85:f7:d4:e9:ac:c0

Fingerprint (sha1): 90:6a:04:c1:bf:b2:48:4d:70:01:38:1b:2a:27:83:5d:35:62:27:ab
Fingerprint (sha256): 19:c8:8e:8f:77:11:ab:bc:a1:ed:c3:cb:8d:cf:a9:5f:25:76:9a:b6:cc:e8:cd:19:2b:46:4d:51:99:a2:83:5a

Issuing Certificate URL: http://aia.swissdigicert.ch/sdcs-rubin.crt

Revocation information

OCSP Server: http://ocsp.swissdigicert.ch/rubin
CRL Distribution Point: http://crl.swissdigicert.ch/sdcs-rubin.crl
CRL Distribution Point: ldap://ldap.swissdigicert.ch/CN=Swisscom%20Rubin%20CA%201,dc=rubin,dc=swissdigicert,dc=ch?certificateRevocationList?

Check the revocation status for certificate mi.avesco.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mi.avesco.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mi.avesco.ch
eas.avesco.ch

Other certificates including the domain name avesco.ch

(limited to 100 certificates)
transformers.avesco.ch
sempach.avesco.ch
intern.avesco.ch
tools.avesco.ch
sempach.avesco.ch
cards.avesco.ch
2017.avesco.ch
intern.avesco.ch
tools.avesco.ch
staplershop.avesco.ch
tools.avesco.ch
sempach.avesco.ch
avesco-shop.ch
da.avesco.ch
tools.avesco.ch
service.avesco.ch
transformers.avesco.ch
mi.avesco.ch
sempach.avesco.ch
crm.avesco.ch
trace.avesco.ch
intern.avesco.ch
events.avesco.ch
trace.avesco.ch
service-forum.avesco.ch
tools.avesco.ch
2017.avesco.ch
tools.avesco.ch
sempach.avesco.ch
*.avesco.ch
staplershop.avesco.ch
avesco.ch
service.avesco.ch
wm.avesco.ch
sempach.avesco.ch
tools.avesco.ch
tools.avesco.ch
meisterschaft.avesco.ch
avesco.ch
bauma.avesco.ch
staplershop.avesco.ch
transformers.avesco.ch
meisterschaft.avesco.ch
service.avesco.ch
transformers.avesco.ch
tools.avesco.ch
staplershop.ch
staplershop.avesco.ch
avesco.ch
meisterschaft.avesco.ch
sempach.avesco.ch
avesco.ch
meisterschaft.avesco.ch
meisterschaft.avesco.ch
avesco.ch
service.avesco.ch
avesco.ch
wm.avesco.ch
cargo.avesco.ch
intern.avesco.ch
webmail.avesco.ch
service.avesco.ch
avesco.ch
myservice.avesco.ch
tools.avesco.ch
transformers.avesco.ch
intern.avesco.ch
avesco.ch
em2016.avesco.ch
2017.avesco.ch
transformers.avesco.ch
transformers.avesco.ch
*.avesco.ch
cards.avesco.ch
service.avesco.ch
intern.avesco.ch
avesco.ch
webmail.avesco.ch
sempach.avesco.ch
service.avesco.ch
avesco.ch
em2016.avesco.ch
meisterschaft.avesco.ch
service.avesco.ch
avesco.ch
webmail.avesco.ch
meisterschaft.avesco.ch
sempach.avesco.ch
webmail.avesco.ch
trace.avesco.ch
staplershop.avesco.ch
em2016.avesco.ch
sempach.avesco.ch
intern.avesco.ch
meisterschaft.avesco.ch
*.avesco.ch
intern.avesco.ch
events.avesco.ch
events.avesco.ch
service-forum.avesco.ch

Certificate

The complete raw certificate details for mi.avesco.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L5A5yjoXJGro/4EBO+B
9Gd42mKh8VHl+ZPf9OA32PjmPi/c8tGGMragMfD2WPT89w6FvI6LhKuJ5UV0m/pz
mApwZRQRcMYqDIk1Xsg9UBUxWfRon/WU/iT0VH1Upb+RBz3DDXr8lqqlT4H9qjU2
sBXOBlGSig28YCuZ++2oWvZEo+Z4IbJuGEGmHJsM273TjRLNzsSwOGAB8Ometh2I
lk+doikgJhzHtXCs8st+xbaJ7WRS6DzIBQSAnv09t5FS2OJOoSQdZVueLSk4g6uG
mRHQso2h6fik88bJKE4Ikhu5JAUfTSe/APzEB8EfDhMyokbWarztqMZoJTAIoVlz
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337170037102104414282416982214571220275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ch'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital Certificate Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom Rubin CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-06 13:17:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-06 13:17:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mobile Device Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mi.avesco.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26351384943838181433309249418073337325671919936748789470096529374602255315660715837733633586629098913884227725497837809342803523783384131544974486017385600894144387217669163822688754512044902346102373881525810270477426782896136791809865059582804067622642579392875308823344083659552726969328274633958968415251808614146394597487093299331934343711798807610295880260524744729160016174065427162844577472277290603890828827964398730870569673978525777039790741649464769515401942890483224949780693761107944574924639783524761889880514574706447777892435446772781250315166514712966509376629972750228860643533263713844572949410741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2dc2a7a3633e3f8347ab4833368185f7d4e9acc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swissdigicert.ch/rubin'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swissdigicert.ch/sdcs-rubin.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.83.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.swissdigicert.ch/documents'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (177 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swissdigicert.ch/sdcs-rubin.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.swissdigicert.ch/CN=Swisscom%20Rubin%20CA%201,dc=rubin,dc=swissdigicert,dc=ch?certificateRevocationList?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.avesco.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eas.avesco.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4fe29a2768d987a0dd3080a5cb6011d227c4e80
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001e9767979f1b16bbec86cf7e277fc062a6761d2ada6436fe2810f252fe721ebe91ab0af8c62a0c770ad6eef7b3997a270ee8c6b69ac1f8480bc4611d26e12e0c4443ee1f733246c20602e6df5055ccda9d609fdee1963e1ab92fd2d718e0677230a549660b602b89c008d177b0814c9b049016c7f6d1e382cd9663b942035c3aef41378e68594bc9d05a790ba841106723647c0c78a9dd32546f75b2b278424366441d5a3b696dc41a15dafcb7b2235c13b1ebdf5ba33bad8173bb79d8ba3f58f2834cd9ae49c6d039956bcfc59574de4599f20800574efb03cdb88eaed53a3290e4e4997feb5ead3364f0888fe97a8b4d72247b5d46863835e862ae89e64c3a