immosearch.swisslife.ch

- Swiss Life AG -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0d:44:e9:28:f8:8b:41:8b:ba:aa:3c:e6:87:53:b4:de was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swiss Life AG

Organization: Swiss Life AG
Organization unit: CHIO
State / Province: Zurich
Locality: Zurich
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:44:e9:28:f8:8b:41:8b:ba:aa:3c:e6:87:53:b4:de
Serial Number (int): 17637769179069058692261302454841488606
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2c:87:b2:a6:9a:18:a9:bf:52:8f:bd:89:81:55:48:ca:ab:a2:d6:c7
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 67:31:76:1b:ad:f7:17:b6:fb:e1:72:3d:76:da:6d:28:54:67:f7:eb
Fingerprint (sha256): 27:08:af:69:09:af:a8:c6:17:83:65:d6:56:c6:4c:74:7c:ee:f4:31:41:df:53:11:1a:4e:ea:e8:84:f1:6e:43

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate immosearch.swisslife.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for immosearch.swisslife.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

immosearch.swisslife.ch

Other certificates including the domain name swisslife.ch

(limited to 100 certificates)
*.f2c-b.swisslife.ch
mi.swisslife.ch
vpn.finance.swisslife.ch
standorte.swisslife.ch
immopulse.swisslife.ch
sps.uat.finance.swisslife.ch
vote.swisslife.ch
sps-bcm.finance.swisslife.ch
events.biggestfantour.com
secure07.lithium.com
mydesk.swisslife.ch
berufsleben.swisslife.ch
ras.swisslife.ch
wahlensst.swisslife.ch
kvg.swisslife.ch
mylife-apps.swisslife.ch
secure04.stage.lithium.com
tax.swisslife.ch
berufsleben.swisslife.ch
entry.swisslife.ch
mis-q.swisslife.ch
secure08.lithium.com
sportclub.swisslife.ch
secure08.lithium.com
mis-q.swisslife.ch
immopulse.swisslife.ch
secure07.lithium.com
secure07.lithium.com
apps.uat.finance.swisslife.ch
*.entry.swisslife.ch
secure04.stage.lithium.com
events.biggestfantour.com
wwf.swisslife.ch
slwebext.swisslife.ch
mylife-sms.swisslife.ch
jobs.marugame-seimen.com
mylife-ucm-bcm.swisslife.ch
pwd.swisslife.ch
mail.swisslife.ch
*.wafcez-uat.swisslife.ch
mylife-bcm.swisslife.ch
*.f2c-uat.swisslife.ch
wlanldap.swisslife.ch
*.f2c-c.swisslife.ch
secure04.stage.lithium.com
sps.uat.finance.swisslife.ch
ras-s.swisslife.ch
vpn.finance.swisslife.ch
mylife-apps-sms.swisslife.ch
*.entry.swisslife.ch
calculator.swisslife.ch
mail2.swisslife.ch
secure08.lithium.com
sftppublic.swisslife.ch
wlanldap.swisslife.ch
mylife-sso-uat.swisslife.ch
immopulse.swisslife.ch
*.wafcez-uat.swisslife.ch
video.swisslife.ch
wlanldap.swisslife.ch
entry.swisslife.ch
magazin.swisslife.ch
secure04.stage.lithium.com
www.swisslife.ch
mi-q.swisslife.ch
sps.finance.swisslife.ch
secure04.stage.lithium.com
kundenpanel.swisslife.ch
secure07.lithium.com
secure04.stage.lithium.com
mis.swisslife.ch
www-d.swisslife.ch
wahlensl2s.swisslife.ch
mylife-ts.swisslife.ch
sftp.swisslife.ch
secure08.lithium.com
*.apps.sps.st.finance.swisslife.ch
entry-vpn.swisslife.ch
ts.st.finance.swisslife.ch
wahlenbasis.swisslife.ch
signon.swisslife.ch
partner.swisslife.ch
secure04.stage.lithium.com
*.patch-fimu.swisslife.ch
kundenpanel.swisslife.ch
*.apps.sps.st.finance.swisslife.ch
wohnvorsorge.swisslife.ch
*.wafcez.swisslife.ch
secure08.lithium.com
wendungen.swisslife.ch
secure04.stage.lithium.com
*.fimu.swisslife.ch
secure04.stage.lithium.com
immosearch.swisslife.ch
secure04.stage.lithium.com
answers-embed.campusfederal.org.pagescdn.com
hrdbint.swisslife.ch
mi.swisslife.ch
slfs1.swisslife.ch
*.a.portals.swisslife.ch

Certificate

The complete raw certificate details for immosearch.swisslife.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17637769179069058692261302454841488606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swiss Life AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHIO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'immosearch.swisslife.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 748911466590529085283331980140973484921430285137942206595197949268380534192615117052988603874630883584946150614868284769535849050244467043891779093481503268006282532014314388231929692735415994780707971155135594724978995024841179430241351128550552427726827899914219539418592941103140786469987414654296509212612823208161352220898491363465739762803190496850270899632765317434875604351837206987752697874608277037474986492162973149662501865703730512655358838521738891838345424087127698740287841702725154747742258892017836395265092424668190135261274899955098379687190851363310972097936339907414441506684074327546409426456697670192707884514780226696001284972781501122349924375958670732353305708306011783404512861338131459532595345905697137564204922472267236960542362409252066870805886291590340916510965001299334480557883289989490166476644303492364142472721889002078787171996244590496091804932770056211804065507506165330341877841030752315163682363865259971870260643834797435921213238954331584834807412476097466359828552396190800048795768672288008038799738682584617557048605530869080359703722976595632988304546931364841743152739964527022163784814780908435189504951932903708071267074867517199536959446057872637759762695262045217267079208494581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c87b2a69a18a9bf528fbd89815548caaba2d6c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immosearch.swisslife.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001636e5094f00000040300483046022100c4e0ad818296fd1de4fd83daf1c13a15c44da694a6a3afd6f8c058df5bb71f4e022100eb443569f53bc2cb71b178b6d32a226e0d5e6d1717386c095859f9a8ce162c9c0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001636e50970000000403004830460221008a6af35c3aeefc22da80d1d42191e0f3ef2c14e0fe5bda11e249da2d6c3734550221008a7ce4cf7c2d618696e0134fa121e7f1dccb1cb3b5435831dee04149d3f443b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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