*.ecmt.ch

- ecmt GmbH -

Issued by StartCom Class 3 OV Server CA

About this certificate

This digital certificate with serial number 35:07:8c:25:50:e7:25:bd:72:01:10:6d:9a:67:71:05 was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ecmt GmbH

Organization: ecmt GmbH
State / Province: Zurich
Locality: Embrach
Country: CH

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 35:07:8c:25:50:e7:25:bd:72:01:10:6d:9a:67:71:05
Serial Number (int): 70488272348435050191189277449015226629
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 97:4a:73:24:85:03:38:3b:7e:b9:86:24:db:84:79:6b:ff:db:c9:69
AuthorityKeyId: b1:3f:1c:92:7b:92:b0:5a:25:b3:38:fb:9c:07:a4:26:50:32:e3:51

Fingerprint (sha1): fe:16:e1:0c:69:46:af:2d:6c:d6:61:0b:6b:f5:df:8c:5d:64:0e:20
Fingerprint (sha256): 2c:4c:e1:c1:32:c8:b1:fa:1e:bd:bc:72:0e:42:d1:f2:87:c2:db:de:70:96:dd:48:01:60:97:4c:9c:65:3d:d3

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server3.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server3.crl

Check the revocation status for certificate *.ecmt.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ecmt.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ecmt.ch

Other certificates including the domain name ecmt.ch

(limited to 100 certificates)
kkobs.ecmt.ch
custodio.ecmt.ch
demo-v3.ecmt.ch
v3.ecmt.ch
custodio.ecmt.ch
www.ecmt.ch
www.ecmt.ch
mobilepush.ecmt.ch
v3.ecmt.ch
ecmt.ch
demo-v3.ecmt.ch
ecmt.ch
update.ecmt.ch
kkobs.ecmt.ch
custodio.ecmt.ch
custodio.ecmt.ch
ecmt.ch
*.ecmt.ch
demo-v3.ecmt.ch
ecmt.ch
kfstg.ecmt.ch
custodio.ecmt.ch
ecmt.ch
custodio.ecmt.ch
demo-v3.ecmt.ch
demo-v3.ecmt.ch
custodio.ecmt.ch
ecmt.ch
www.ecmt.ch
demo-v3.ecmt.ch
ecmt.ch
ecmt.ch
kkobs.ecmt.ch
kkobs.ecmt.ch
kkobs.ecmt.ch
kfstg.ecmt.ch
demo-v3.ecmt.ch
www.ecmt.ch
demo-v3.ecmt.ch
ecmt.ch
ecmt.ch
ecmt.ch
ecmt.ch
custodio.ecmt.ch
www.ecmt.ch
custodio.ecmt.ch
kfstg.ecmt.ch
custodio.ecmt.ch
www.ecmt.ch
ecmt.ch
kkobs.ecmt.ch
demo-v3.ecmt.ch
www.ecmt.ch
kkobs.ecmt.ch
www.ecmt.ch
*.ecmt.ch
kkobs.ecmt.ch
www.ecmt.ch
kkobs.ecmt.ch
custodio.ecmt.ch
kkobs.ecmt.ch
www.ecmt.ch
demo-v3.ecmt.ch
custodio.ecmt.ch
www.ecmt.ch
ecmt.ch
custodio.ecmt.ch
kkobs.ecmt.ch
kkobs.ecmt.ch
www.ecmt.ch
demo-v3.ecmt.ch
demo-v3.ecmt.ch
ecmt.ch
demo-v3.ecmt.ch
www.ecmt.ch
kkobs.ecmt.ch
kkobs.ecmt.ch
ecmt.ch
demo-v3.ecmt.ch
kkobs.ecmt.ch
ecmt.ch
demo-v3.ecmt.ch
custodio.ecmt.ch
kkobs.ecmt.ch
kkobs.ecmt.ch
ecmt.ch
www.ecmt.ch
kkobs.ecmt.ch
kkobs.ecmt.ch
custodio.ecmt.ch
custodio.ecmt.ch
demo-v3.ecmt.ch
kkobs.ecmt.ch
custodio.ecmt.ch
ecmt.ch
demo-v3.ecmt.ch
demo-v3.ecmt.ch
kfstg.ecmt.ch
*.ecmt.ch
custodio.ecmt.ch

Certificate

The complete raw certificate details for *.ecmt.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBN7HgQPJhqxcOVtTDj5
RVyOZvS+xIwZcrHLyMYsK1WeI4uhhtKmZE0iekpDF/Mv838AAQNQ1l/uw0KdPKtr
1mlOcQknOXo6iSj7RycitdpKDM1zw2gZUKfJfV6s9tioL7jwrZoXO/sNGYQFdQfL
FfZZw1YlmzCk135m7zrE1x7IbuIHuIDXrKK5FAGZ0hiYphSOCJNH7C8t/e0IjsNG
oaJalyct5ykSXHQCaoMy7bGEJ5y/ZNBCQf6/uZtirZfXMPbwi8uqrvOFGxfjU6WM
ca2AV8KwdiUQYoOQiHHYcI6BV7cvVyrczEFWHLa2VcNwRZ25bAWTcPIU75I+rYul
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70488272348435050191189277449015226629
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 3 OV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-19 12:59:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 12:59:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Embrach'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ecmt GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ecmt.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25257267396230463132176457046247509549377538542002955219790832677194073123561587475538304752694696108016817777138968360769564320619038425174318681420873513233968923822008774673326637959354178721020603343479689603737575679610781113529049253666804168510428579499508446045586229038054184066022676041697725574092020066263526322888937729857564298966034768671823792605787292056102239289084450865389286498796492753344867965018681363910934757688216797412384161206640504346039944129985967498709108050391581310456126291650013313607500146572147433135520897024932348962306875031372359473737835378409464529606782771019257165358471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							974a73248503383b7eb98624db84796bffdbc969
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b13f1c927b92b05a25b338fb9c07a4265032e351
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecmt.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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