vizmon-int.post.ch

- Post CH AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 49:b9:c4:dd:06:a9:33:ac:21:e7:f7:58:12:14:0e:7d:ce:d5:ec:81 was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Post CH AG

Organization: Post CH AG
State / Province: BE
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 49:b9:c4:dd:06:a9:33:ac:21:e7:f7:58:12:14:0e:7d:ce:d5:ec:81
Serial Number (int): 420899113351168079270375829682658245187420417153
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: ef:34:9e:d7:21:e9:ff:62:38:2b:96:e5:d2:ac:73:83:ba:03:67:5b
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 30:d9:56:f3:12:80:32:29:55:06:22:9b:2b:c5:84:08:1f:57:dd:3f
Fingerprint (sha256): 40:b3:67:bc:60:50:32:9d:ab:50:81:9a:cc:8e:9a:2c:26:88:7f:cd:b2:e1:96:de:31:4b:2a:f9:a8:45:d2:eb

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate vizmon-int.post.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vizmon-int.post.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vizmon-int.post.ch

Other certificates including the domain name post.ch

(limited to 100 certificates)
fakeext.post.ch
zwab-int.post.ch
moodle.pa.post.ch
mova.post.ch
webfocus.post.ch
securepost.post.ch
filialemitpartner.post.ch
moodle.pa.post.ch
e-collaboration-int.post.ch
jobs-int.post.ch
m-extranet.post.ch
xray.tools.post.ch
directpoint.post.ch
places.post.ch
new.post.ch
mapservice.post.ch
wohnen-franklinplatz.post.ch
wwwsc.post.ch
gandalf.apis.post.ch
billingonline-dev.post.ch
dh-auth.apis.post.ch
cinfoni-germany.innovation.post.ch
loginint.post.ch
file-intpa-cms.post.ch
agentur-int.post.ch
gitit.post.ch
zubofi.apis-dev.post.ch
ef-testix.post.ch
transport-service.post.ch
directpoint.post.ch
ci-euw1.ireland.delivery.aimatch.net
accountint2.post.ch
address.apis-test.post.ch
docucenterint.post.ch
ci-euw1.ireland.delivery.aimatch.net
msmgateway-int.post.ch
epostoffice3.post.ch
static.post.ch
location-poste-martigny.post.ch
crypto-stamp.post.ch
gabi.apis-test.post.ch
nemoauth-test.post.ch
sorryrpz-int.post.ch
webservices-cashlog-int.post.ch
accountint1.post.ch
static.post.ch
cbt.externint.post.ch
wohnen-zollikofen.post.ch
directdayint.post.ch
apis.post.ch
gw.incamail-dev.post.ch
mx3.post.ch
ci-euw1.ireland.delivery.aimatch.net
postweb.post.ch
orgtool-int.post.ch
die-post-kann-mehrint.post.ch
erpcorp.apis-int.post.ch
schreibenint.post.ch
nemoint.post.ch
postzone.extern.post.ch
news-intern.post.ch
cockpitint2.post.ch
apitest.post.ch
mp24hub.apis.post.ch
mobilecodeservice.apis.post.ch
vsc.apis.post.ch
stb-test.innovation.post.ch
pccweb.apitest.post.ch
webtransferint.post.ch
agentur-int.post.ch
laborsendungen.post.ch
facetoface.post.ch
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
digitaler-posteingangint.post.ch
e-mobilityint.post.ch
fdsbc.post.ch
tresorit.post.ch
gw.incamail-dev.post.ch
gewinnende-worte.post.ch
accountint2.post.ch
rasns01.post.ch
ident.apis-dev.post.ch
test.post.ch
e-commerce.post.ch
salt-aboint.post.ch
96749.post.ch
juravote-int.post.ch
sventest.post.ch
sventest.post.ch
e-mobilityint.post.ch
sapmsint.post.ch
gollum.apis-dev.post.ch
www.post.ch
service.post.ch
opera.apis-test.post.ch
address.apis-test.post.ch
news-intern.post.ch
awsegpf.post.ch
mapservice.post.ch

Certificate

The complete raw certificate details for vizmon-int.post.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420899113351168079270375829682658245187420417153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-22 12:21:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 12:21:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Post CH AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vizmon-int.post.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744790314665395483331726317938625143838256536814970622926228849489555585206969358669280397670014545651920016128529302047658287004102537584344011273858977290836729501852610625712130095119311731114088768595780316853408804538902817065818344735832822973608517628739883808041869171584365897719718940505771655044475590181260018768016870482490833218792811288784300708419028928725120473146607005886446468640114013531281282483869158947109151223206245904169918081947184930327160649812544598786261989699735514964908785587010827674143143841643504556213591136413592598409144815467651794923020424225806799256753782955422754454277909476799828318753896775751871235588181022256222603175075246550082885793208161456292120204926262221329059126035672412232336889751169059674970265345177887068294844201386179302960774361734326065230134809348812961365658357650044117719269759496494604648381426940548823054770570578081559806095472533673526872292833578961682402072460280824320362513928540977963660160774864746694798680726540036503454286141613365310638117217802256038392969565864393249228165274945287387870421376582243947676782848389937461719820677137982516265516230145742515503525027848433389409421165377613448238970537556690959853942410614251896550411694883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vizmon-int.post.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef349ed721e9ff62382b96e5d2ac7383ba03675b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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