imito.stgag.ch

- thurmed AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 32:13:ff:49:4e:cb:49:87:c3:e8:c9:cb:0b:32:34:99:30:1c:41:c7 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

thurmed AG

Organization: thurmed AG
State / Province: TG
Locality: Frauenfeld
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 32:13:ff:49:4e:cb:49:87:c3:e8:c9:cb:0b:32:34:99:30:1c:41:c7
Serial Number (int): 285895491278224753448589109196985750474947576263
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: e8:c5:61:82:96:af:27:58:c1:29:84:61:98:02:cd:7b:e2:7e:4f:47
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 85:5a:4e:14:bc:13:c8:dc:d7:0e:34:36:a7:5b:e9:98:a9:e0:a5:07
Fingerprint (sha256): 1f:1b:3b:b9:a4:f6:3e:c4:01:79:7f:02:ec:2b:38:ad:88:68:45:c2:15:6d:5c:f7:ab:65:0a:a3:30:c0:7d:af

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate imito.stgag.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imito.stgag.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

imito.stgag.ch

Other certificates including the domain name stgag.ch

(limited to 100 certificates)
imito-test.stgag.ch
af.stgag.ch
www.stgag.ch
pol.swiss
pol.swiss
pol.swiss
rekrutierung.stgag.ch
pol.swiss
pol.swiss
stgag.ch
imito-test.stgag.ch
pol.swiss
imito.stgag.ch
imito-test.stgag.ch
pol.swiss
pol.swiss
www.stgag.ch
mail.stgag.ch
pol.swiss
www.stgag.ch
stgag.ch
www.stgag.ch
www.stgag.ch
stg-xapf.stgag.ch
stg-xapf.stgag.ch
am.stgag.ch
nova-sc.stgag.ch
stgag.ch
*.stgag.ch
stgag.ch
stgag.ch
jobportal.stgag.ch
pol.swiss
www.stgag.ch
imito.stgag.ch
imito.stgag.ch
www.stgag.ch
stg-xapf.stgag.ch
jobportal.stgag.ch
imito-test.stgag.ch
pol.swiss
expe.stgag.ch
*.stgag.ch
*.stgag.ch
*.stgag.ch
stgag.ch
*.stgag.ch
imito.stgag.ch
imito-test.stgag.ch
pol.swiss
imito-test.stgag.ch
imito.stgag.ch
pol.swiss
jobportal.stgag.ch
jobportal.stgag.ch
stg-xapf.stgag.ch
stgag.ch
pol.swiss
jobportal.stgag.ch
stg-xapf.stgag.ch
expe.stgag.ch
www.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
pol.swiss
pol.swiss
imito.stgag.ch
stg-wifi-gast.stgag.ch
*.stgag.ch
imito.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
pol.swiss
pol.swiss
pol.swiss
imito-test.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
nova-sc.stgag.ch
imito-test.stgag.ch
*.stgag.ch
*.stgag.ch
stgag.ch
rekrutierung.stgag.ch
imito.stgag.ch
pol.swiss
stg-wifi-gast.stgag.ch
stgag.ch
jobportal.stgag.ch
af.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
am.stgag.ch
stgag.ch
stg-xapf.stgag.ch

Certificate

The complete raw certificate details for imito.stgag.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Z7OSLTJHbgatGcof/qi
ip/KcnLi7+Tfe3OmmGWgyXnZLeIitgzgMysxsAZgMw6seUNOTdzgHUsAsFwUCgwn
e6p5qU5xIzzRuZyLt3l3bCMya5BMYuvr2Ra/4oYlvrmTNqvB1HsQKtxREBxZ9GwT
Lc17WluGFcVY3XvvZYxn33lS+U7fO76u+L8J0ZZCuPM4Om0Vs9XzuKqSeGgP3OzY
6ffr+JZaB0nQoQ+xHFlQJvTqZthDj7GrC3rY8T4gf5YbeO1ErghlnJOJNQYjs9vr
6vsrLEznB89XQJJi4eFvsu3xQsr324s1EvF0YFgGqnwR4Y2tBPmHkn8f5wLlBNQD
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285895491278224753448589109196985750474947576263
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-09 09:54:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-09 09:54:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frauenfeld'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'thurmed AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'imito.stgag.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29996788334067260585356737453613994584402400952957567940894517364766222933455862571551002192216261110707947966274821107948843764957284646562088903290864931873554853865379400604586910972793331720303693562467352412043315795127407095046252760931814843258577804349986501942439527675043577550544218406814627315315537831154764373895768038883524899607465533446260404698995929270638340417492825819054757055183416865339377796068940042842173915389052255921483757451210805607772265680705550108940424119413483634618169100822965228780231331061696485646075272718416735667123442399655301653605919915323618004492380841991665213506451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imito.stgag.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8c5618296af2758c12984619802cd7be27e4f47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							02570077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000189d9b867260000040300483046022100973891ecdd0e767e489306905b3ca36c63cdea679e99d9c0aab31243b5dd081e022100bab593d459d0fdd7089317e0880dd7da99337f265698142ec7240a13bcb183bc007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189d9b8685a0000040300473045022072c96d9fe698cbf3afa5024ef02f6654cf7df84e35263b1348821c73657a4623022100a597ebf0e72b822b2f62a424231fbac06e6b5b82ac3394af25f8c31fbd3a939500750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000189d9b8693c00000403004630440220694477b320a474d5aca9e49865b17abf42b51224e2cf34e30c9dda5eb2879b860220748178e42acd563cf22db8793ea26082068971b53f8c4d26435ce51773eb0d49007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189d9b86c0a000004030046304402202fe277f9c038e982c735b9822c126085aaf1d4292c239cac280f3111e6171a020220464ee8e4ced0154e23f25aab3857432cc7896e0d2684d6c7536e6cbb6461751b007600874fb50dc029d9931de573e9f2899e8e4533b392d38b0a462574bf0feeb2fc1e00000189d9b871f90000040300473045022059aaaa38add90d218cf0973516a0677a36dc65e192b580baaeed5b77023ec5f4022100e8e2f9c7bbe7385685b0e9488d8585b746f67ef566182177b43f3e801f4a6e9e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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