akeneo-admin.bkw.ch

- BKW AG -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:33:b1:9a:d6:4f:3a:31:aa:ca:5b:79:b2:ec:0d:d4 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BKW AG

Organization: BKW AG
Locality: Bern
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:33:b1:9a:d6:4f:3a:31:aa:ca:5b:79:b2:ec:0d:d4
Serial Number (int): 16219145343166712281244384078489980372
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 27:4f:54:e2:41:0a:a1:d1:4f:da:41:2a:b8:73:31:82:9c:1c:c4:11
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 51:d9:c2:e6:7a:59:0e:73:f5:5b:ad:68:33:08:2c:f1:a3:a6:75:bc
Fingerprint (sha256): 1a:43:ee:0c:21:46:fc:9c:66:b4:f2:b5:e5:fc:ad:7d:8f:12:84:09:c1:ad:04:55:00:a3:30:d4:0d:b0:32:db

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate akeneo-admin.bkw.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for akeneo-admin.bkw.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akeneo-admin.bkw.ch
akeneo-admin-t.bkw.ch

Other certificates including the domain name bkw.ch

(limited to 100 certificates)
ecmt.bkw.ch
jobs.bkw.ch
ins.bkw.ch
auth.crmdynamicst.bkw.ch
gridconnection.bkw.ch
event.bkw.ch
trinity.bkw.ch
blog.bkw.ch
blog.bkw.ch
zoon.bkw.ch
haefa.bkw.ch
event-nachhaltigkeit.bkw.ch
blue.bkw.ch
api-notis.bkw.ch
login.bkw.ch
azimi.int.bkw.ch
oscar.bkw.ch
api.bkw.ch
www.bkw.ch
shop.bkw.ch
blog.bkw.ch
bfc-example-app-next.bkw.ch
www.bkw.ch
outlook.bkw.ch
api-crm.bkw.ch
zoon.bkw.ch
blog.bkw.ch
ns-t-bkw-dmz-cus-aaa-ldap-01.bkw.ch
bkw.ch
event-nachhaltigkeit.bkw.ch
bkw.ch
feuerwehr.bkw.ch
ictmonitoring.bkw.ch
belvis.aek.ch
services-q.bkw.ch
ewp.bkw.ch
static.bkw.ch
event.bkw.ch
connect.bkw.ch
fed.bkw.ch
api-dsv-energy-strategy-backend.bkw.ch
event.bkw.ch
git.bkw.ch
netzauskunft.bkw.ch
blog.bkw.ch
akeneo-admin.bkw.ch
eventportal.bkw.ch
ra-kkm.bkw.ch
m2c-bills.bkw.ch
cloud.aek.ch
event.bkw.ch
jobs.bkw.ch
oscar.bkw-fmb.ch
event.bkw.ch
pwreset.bkw.ch
oscar.bkw.ch
*.msda.bkw.ch
www.bkwengineering.com
my.home-energy.bkw.ch
sitzung.hostedapps.bkw.ch
cockpitservicears.bkw.ch
outage.bkw.ch
api-tangento.bkw.ch
jobs.bkw.ch
shop.bkw.ch
event-nachhaltigkeit.bkw.ch
visualization.bkw.ch
visustrom1.bkw.ch
netzauskunft.bkw.ch
blog.bkw.ch
thehub-cloud.bkw.ch
ise.bkw-fmb.ch
BESUCHERZENTREN.BKW.CH
gsxmonitoring.bkw.ch
energy-asset.bkw.ch
mdomus-poc.bkw.ch
login-v2-t.bkw.ch
shop.bkw.ch
metering-workforce.bkw.ch
nexus.bkw.ch
my.home-energy.bkw.ch
haefa.test.bkw.ch
energymonitoring.bkw.ch
api-q.bkw.ch
oscar.bkw.ch
www.abaclik.bkw.ch
*.apps.collab.bkw.ch
*.elastic.int.bkw.ch
plantservices.bkw.ch
mdl.bkw.ch
blog.bkw.ch
*.aks02.bkw.ch
api-energy-asset.bkw.ch
netzauskunft.bkw.ch
smk-mdm.bkw.ch
event-nachhaltigkeit.bkw.ch
shop.bkw.ch
api-m2c-t.bkw.ch
eventportal.bkw.ch
api-oneportal-edm.bkw.ch

Certificate

The complete raw certificate details for akeneo-admin.bkw.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16219145343166712281244384078489980372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BKW AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'akeneo-admin.bkw.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 592828326179761420199142303327950272211486529348470714491817959794028722816628380925374671531638589514893997968132582323745950112111184626279296543492292254006420692170333000541054348321027224543058244280026398151973418890801656704676013456982115425510641521311522537627457562877392971934104424068395497600328227053450627028514628851369740768758681248197034697159862274711519270346240469071943140131868506888914297261175472810662565206010440754127898438874308391757776985210887864777202356911469708590654022130807823242799737307297860647235481288697569969429904226866373786989572128180525515818373573814890743822079568131497369043031720605126957818187145441588528942326494375730181852617185333034139599817222269435550286945500941520489430814437386950410419503264711137797727787328370595087774799568673719009717815143966831790039596182505294729675572768021773913604168360451774604331654689634523748886204388493483109415457246310949049192293950419724145602946594438884939105186055143927607482494693419093844531920772445712546739653117244196317239195367550304877306442301499401104347889006524377055935523871709586897673874770544489026736675290723815365261484187867427973822340656961966090705648516308812868376910333442330069714053412239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							274f54e2410aa1d14fda412ab87331829c1cc411
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akeneo-admin.bkw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akeneo-admin-t.bkw.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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