sap.lantal.ch

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0d:79:b9:1b:cf:72:b5:ad:cf:f9:84:cc:c0:8d:10:5c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sap.lantal.ch

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:79:b9:1b:cf:72:b5:ad:cf:f9:84:cc:c0:8d:10:5c
Serial Number (int): 17911986314225756466028003466127675484
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 43:e2:c9:44:96:3c:c2:18:2c:f9:e2:bb:ed:0c:f6:a0:37:ab:1a:bc
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 07:fa:d2:ec:e7:73:60:4e:9f:f0:b2:a5:4a:dd:0a:46:f3:4a:21:40
Fingerprint (sha256): 1a:08:00:70:a5:37:60:16:20:89:3f:3c:97:5f:51:53:8a:94:36:ee:97:8a:0a:38:16:6c:a0:3c:fe:1a:bf:59

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate sap.lantal.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sap.lantal.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sap.lantal.ch

Other certificates including the domain name lantal.ch

(limited to 100 certificates)
sap.lantal.ch
portal.lantal.ch
*.lantal.ch
portal.lantal.ch
*.lantal.ch
sap.lantal.ch
sap.lantal.ch
sap.lantal.ch
portal.lantal.ch
*.lantal.ch
ftp.lantal.ch
portal.lantal.ch
cps.lantal.ch
portal.lantal.ch
*.lantal.ch
*.lantal.ch
connect.lantal.ch
portal.lantal.ch
sap.lantal.ch
connect.lantal.ch
sap.lantal.ch
webmail.lantal.ch
connect.lantal.ch
portal.lantal.ch
ftp.lantal.ch
sap.lantal.ch
*.lantal.ch
ftp.lantal.ch
portal.lantal.ch
portal.lantal.ch
*.lantal.ch
sap.lantal.ch
meeting.lantal.ch
mobile.lantal.ch
connect.lantal.ch
portal.lantal.ch
webmail.lantal.ch
webchat.lantal.ch
portal.lantal.ch
sap.lantal.ch
ftp.lantal.ch
webmail.lantal.ch
portal.lantal.ch

Certificate

The complete raw certificate details for sap.lantal.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32whFZpfLXC/WqaRef7h
WD0dlB+bNiFJsBgcBYXfyQ2vfBrIoSQd4QmqhdhZ+PToWe9sx6waUAC2jExnrlV5
qhR1RMoXtUGhE5xWzhMYx7obdPmHh0+HFoynd8YqcG+9UFaoLh79VlfZSI3yb2M4
ZhLfgwFuSjJQQJ3a5BEpliZOF3ifIAzCQtr5gj0DA4kIan6ZzYnrTH7g5nC19cU8
8o8A5ZL1Yi3eq0YsIDK8gLMBdnaje9ny+QafmvbxPqxUSsroq00Ibukgtiz1UD0O
A/9I3LoGroyAsBw4YqicxH3P1fNt7jEULqIr5Q2hNAHZ2T/bQypeD1PglgpbCHS2
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17911986314225756466028003466127675484
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sap.lantal.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28204462520929136429771882775616982750704328185604366580957788173854690315635337748611445650110100288173173540555827842822817202528253811598317244480738013514129223536129220499288290414406472842060361786644543047106849438267556464328289305733471439366859787073685110346252605148125318277409983230761199526498589193042713173989311328342990214881068221000671540065751720549379241284998464862616878567404448785810129068404885996938610537185607524813346254882230034697136343709853632326260915029435330818201199754767065817570544313039380600722477273884625808864329289986094454556418826575240538390840690737404148545009353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43e2c944963cc2182cf9e2bbed0cf6a037ab1abc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sap.lantal.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016ead07d885000004030046304402204bbf6a21a61b249b78256e447b88ac144e5df7796ab370723bc4e96cea40b16d0220344e8e20bfdcd5e2e810207c736adf04640a54ddbfee58333f338c80d6c857360076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016ead07d8740000040300473045022100f18828ceeeaa507b3e223f00e002a733de1ee3b707bbe0784cfce3eb0615e9c2022034c361a107abd7f7dbc65251e5307540db6c46674c1c42cdd9a1607d84901f8f007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016ead07d88c0000040300473045022100f5a35bdafcab1c07c69ad52fd41842aab61e934fc620fed5996503a29ce1cafe02203ed87339dde6364e32c8e4399532583554645a3a6bcf35b8e5be0f961613416c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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