plan-fabrik.ch

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0c:fc:c6:fb:59:b5:43:6d:59:f0:f2:9e:2a:dd:1a:76 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=plan-fabrik.ch

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:fc:c6:fb:59:b5:43:6d:59:f0:f2:9e:2a:dd:1a:76
Serial Number (int): 17263230588903381011508409256235571830
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 29:2e:b7:57:a6:e0:6f:4f:95:9e:9d:6d:90:02:64:88:14:b1:d5:f1
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 83:1c:da:c6:32:fd:ec:5c:44:bf:a5:96:bf:6e:51:22:9a:e5:60:ab
Fingerprint (sha256): 3d:b9:79:8d:b3:66:75:50:4f:3c:49:c3:6a:37:6e:86:d9:9b:55:3f:35:09:c0:0f:65:46:56:32:66:7b:f0:6c

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate plan-fabrik.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for plan-fabrik.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

plan-fabrik.ch

Other certificates including the domain name plan-fabrik.ch

(limited to 100 certificates)
plan-fabrik.com
plan-fabrik.com
plan-fabrik.com
plan-fabrik.com
plan-fabrik.ch
plan-fabrik.ch
plan-fabrik.com
plan-fabrik.ch
plan-fabrik.com
plan-fabrik.com
plan-fabrik.com
www.plan-fabrik.ch
plan-fabrik.com
plan-fabrik.com
plan-fabrik.com
plan-fabrik.com
plan-fabrik.com
plan-fabrik.com

Certificate

The complete raw certificate details for plan-fabrik.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux2zC6cjsB+Wz9v9QX8w
hbC1v3DxJTwoN2C0ZNBjpDT52ZRzqIr5vxZVmdoEebTPN9mctoyrNkKAq01auHWf
JeU3rx/my/BaqSdQvEsTiRiFBNaYD923sIgs1cWwBxnihMeJ6JR2QvgMgbd6A4PD
gS4x1V1lKv7wB+UGuXzJcFLZEXaQljW67pAigru6W24QR7M3tMbUCYPMq/lhYsEm
SB6dKIYnpPW12xVe/37pajFsxP88/zoUwGP+mV2lSH6DTi2b2arP6ab4Jc/Yfqlp
z8GqjUK5EE3ITJ0dFBSapJnzcNYt59vk8Uu45FvYu7VhxDIftSId8DPvkkRmg6Db
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17263230588903381011508409256235571830
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'plan-fabrik.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23621208346934675207355609526278842292278974806821755414683770774223777084357724710025808755240992954391535753649934753991054814501064072700298440033059214542434727754404637179207963346915262285730452144418613135189435006349997750968072372714139676644279002469393508508436909155265127657313998776090273623878584466950685758312450298154700192793852170965545894529660512123990476641381615954531026095037551189655575494635787734220430027609809370461900089810146065199674226214069068461648472656294855884907206604020404186667948188221214816774003741292630934526866443627332179157970202083599866513330863598057918281341877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							292eb757a6e06f4f959e9d6d9002648814b1d5f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan-fabrik.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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