*.bhf-bank.ch

- BHF-BANK (Schweiz) AG -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 03:d2:ea:37:22:c8:c7:89:75:0e:dd:14:b1:6e:00:e7 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

BHF-BANK (Schweiz) AG

Organization: BHF-BANK (Schweiz) AG
Organization unit: IT
State / Province: Zurich
Locality: Zurich
Country: CH

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:ea:37:22:c8:c7:89:75:0e:dd:14:b1:6e:00:e7
Serial Number (int): 5082816779808471980538206273942716647
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 2c:63:bb:a9:dc:52:97:4c:cd:d4:82:41:26:f0:a6:fa:81:f0:e2:b6
Fingerprint (sha256): 39:a6:96:18:05:ac:e0:e9:48:7d:ae:80:aa:a2:6a:21:1c:b2:f7:1d:67:39:f4:aa:6e:79:73:01:79:6e:79:f3


Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate *.bhf-bank.ch

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bhf-bank.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication

Extensions

4 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name bhf-bank.ch

(limited to 100 certificates)
privat.bhf-bank.ch
securegw.bhf-bank.ch
webmail.oddo-bhf.ch
privat.bhf-bank.ch
*.bhf-bank.ch
privat.bhf-bank.ch
privat.bhf-bank.ch
privat.bhf-bank.ch
securegw.bhf-bank.ch
*.bhf-bank.ch
www.bhf-bank.ch
privat.bhf-bank.ch
privat.bhf-bank.ch
privat.bhf-bank.ch
webmail.oddo-bhf.ch
secure.bhf-bank.ch
www.bhf-bank.ch
secure.bhf-bank.ch
securegw.bhf-bank.ch
www.bhf-bank.ch
webmail.bhf-bank.ch
www.bhf-bank.ch
privat.bhf-bank.ch
webmail.bhf-bank.ch
www.bhf-bank.ch
secure.bhf-bank.ch
secure.bhf-bank.ch
webmail.bhf-bank.ch
privat.bhf-bank.ch
www.bhf-bank.ch
privat.bhf-bank.ch
www.bhf-bank.ch
securegw.bhf-bank.ch

Certificate

The complete raw certificate details for *.bhf-bank.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHdckt8+I8H+UFwOQWLL
FiTyjkAKHNmPX9Zv/hhttfvCD7IaotgAZ8BnuZyb1PrMDjRL7NCy94SotUxe4n9T
qZKemNYDM2cEOUwvLOG6WQQ2RdhGFJUQnI5a13l1KSsDDyLGtQ20dk8QiGowuP84
OaIv5s9bcbttqNruxJTuOhlj4fQM5xvPi40RA7pD6bJoOOqYgxv3+FE30Ag+iNre
MLUFQ5+o8sCRmEEb9Gw7p7xkg8FVKursG8t9SmkXsusMNUHXsUcBSst7tNKdVZtW
ZqQIcIyRQxVoW3E/F0bnYucKiC8Ts6RV1Q5aRX2JYqwqbsT+uRiC3LeXdrHZ0H+4
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5082816779808471980538206273942716647
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Zurich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'BHF-BANK (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.bhf-bank.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25811473619689821386504415341060545757026046299531238791650078311827117964584138136401031010313185136013106770068350442704226521636352368675807464718912750146054108330146478301427280259574552364898437336298299048945839386596967481426059533819295412099352507593627136582491321721777632976706686595268090446844719994299484158930525698750775493730614640439175664177525118990374503532625828293406392832203154662268478594849541002457266581584203885854423098335950786763786411377881200690384029991634741556322337218219815452914369632186699203039358986103170543096535081796587099454089561069526593183051487951872668282632423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009713c07bb2a955a1f1c0588b7eec72f6014a018698f9bc42dbd111f4fa0e1a3674e337cfd01cea891d0ae456acea2dec64471a985152909a1bdb145825f28e0fd2cab1bff4e3c5859459e502cf16c1d6502ecca73e4155e163dec6a143e0fcd4e889b4935a92dc7006fed0495a6d304f7c63f79835a7dafee9d5f72d733c417f9635faf1e0326d4ecc79c7ac196c045e75de439cc64bcd54d8efad666ee048a1d9419d5d78aff9524d9d8ad4032350f0a20f09d421fd4ea0a764956c16bba03666dba7ecb2743dc5af6f79a3b6ea8cbd109da0082e2ca125f7d657bd84109850aada4e55399a42a3c17ea874cd52f6046dc6bcd6a2fb3165478017dcea3fa9a8