learning.sartorius.com

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 2c:31:2b:d9:7e:a6:7b:93:5c:11:ab:74:b7:13:d2:14:67:25:62:54 was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=learning.sartorius.com

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:31:2b:d9:7e:a6:7b:93:5c:11:ab:74:b7:13:d2:14:67:25:62:54
Serial Number (int): 252292150268892782293277259643155056061032260180
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 67:e9:ba:9c:15:f2:83:bc:f6:32:19:e3:ea:e8:de:29:7a:04:fa:6a
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 65:13:86:2a:b8:50:6d:b3:f4:e2:ec:f5:31:eb:ca:28:c7:cc:d7:06
Fingerprint (sha256): 34:5e:38:29:58:f7:9a:f2:15:1b:c6:91:34:7e:ab:04:46:c3:2f:73:a7:0b:c9:44:28:f7:99:39:bf:73:26:41

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate learning.sartorius.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for learning.sartorius.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

learning.sartorius.com

Other certificates including the domain name sartorius.com

(limited to 100 certificates)
cert00068-azurecdn.akamaized.net
go.sartorius.com
owa.sartorius.com
sentry-c1.sartorius.com
btconfigurator-dev.sartorius.com
sentry-access.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
dam-qa.sartorius.com
api-internal.sartorius.com
eshop.sartorius.com
api-qa.sartorius.com
owa.sartorius.com
de05bwinterfacetest.sartorius.com
*.scp.sartorius.com
open-access.sartorius.com
*.scp.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
su-adp-presentation.sartorius.com
open-access.sartorius.com
configurator-training.sartorius.com
www.shop-wer.de
shop.sartorius.com
dam-qa.sartorius.com
www.sartorius.com
ecoach.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
dam-test.sartorius.com
cert00068-azurecdn.akamaized.net
upload.sartorius.com
btconfigurator.sartorius.com
jira.sartorius.com
de91vaucxwye01.sartorius.com
*.portal-q.sartorius.com
git.sartorius.com
ecoach.sartorius.com
configurator-training.sartorius.com
verical.sartorius.com
developerqa.sartorius.com
remote-access-dev.sartorius.com
eshop-qa.sartorius.com
sip-mobile.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
developer-qa.sartorius.com
sce-experlogix.sartorius.com
cert00068-azurecdn.akamaized.net
config-data-downloads.sartorius.com
go.sartorius.com
uc-gw.sartorius.com
*.sartorius.com
btconfigurator-dev.sartorius.com
sartdam.sartorius.com
brm.sartorius.com
btconfigurator-dev3.sartorius.com
cert00068-azurecdn.akamaized.net
bi-test.sartorius.com
gonsap68.sartorius.com
cert00068-azurecdn.akamaized.net
ir-reports.sartorius.com
brm.sartorius.com
developer-qa.sartorius.com
bioprocess-test.sartorius.com
config-data-downloads.sartorius.com
*.scp.sartorius.com
mobile-test.sartorius.com
cert00068-azurecdn.akamaized.net
btconfigurator-dev.sartorius.com
cert00068-azurecdn.akamaized.net
git.sartorius.com
dex.sartorius.com
serviceshop.sartorius.de
owa.sartorius.com
dam-qa.sartorius.com
www.connect-upstream.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
sartdam.sartorius.com
cert00068-azurecdn.akamaized.net
btconfigurator-dev2.sartorius.com
serviceshop.sartorius.de
open-access.sartorius.com
jira.sartorius.com
owa.sartorius.com
cert00068-azurecdn.akamaized.net
config-data-downloads.sartorius.com
cert00068-azurecdn.akamaized.net
bi-test.sartorius.com
studio.sartorius.com
www.shop-wer.de
Sartorius Corporate Administration GmbH
delivery.wcms.qa.sartorius.com
lps-globalsalesmeeting.sartorius.com
mobile.sartorius.com
developer.sartorius.com
login-test.sartorius.com
btconfigurator-dev3.sartorius.com

Certificate

The complete raw certificate details for learning.sartorius.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6rCrpAC7Wca3kAzHjKb
BKwADacShvftzI9qFLg9i35u5zTXYyHvMd/M0xVLsp00U3iKCcfR7VfudmVByxy6
cNRFtMK5iCOEG7xmRAMzajSM57p5P3F55h9n57LEdgEGD4P87rE/ZYGDJBZXDYCJ
SIt4DdPNz50kDzNABadChGKBX0a1IlllgMPY1x06VUux+/fKrMB+H7GJH5Yh8fzf
N/XkOeJE78MVavDpfNxor/VDCWq8Hm0nTvvCuMIsr6LHi2vx9EPpG7RJrziy/+2Y
2aOseojCoa8sDPKWG2B7f6bMzrhRwy9IkPGH7pJWkgmKakrVnFTbeTz9HuEBIPjp
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 252292150268892782293277259643155056061032260180
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-12 12:18:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 12:18:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'learning.sartorius.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23185814937928213163313126587307641733989932738630306847979256674590353894584347521438374067377876850383273893019825400513883769617305097394152174027795093690236812734801759951267117336605872793910406954742075942075315154166240266014174179393860240593041394303420160896562954450546007595962749775375534857371379961943736152761753810134727636904007506246790688582449515260003946575896437748193343849072639505455339320902947899302705360546009266634060309284198830118216262114251661533272529084412301410847597700887219710488794611060346503187965099733640594516326711237575132692978330247586066797335752527478989084223949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.sartorius.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							67e9ba9c15f283bcf63219e3eae8de297a04fa6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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