3cx.okam.ch

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 42:d2:e9:7a:3b:f4:93:7d:68:95:e0:dc:91:79:d2:82 was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=3cx.okam.ch

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 42:d2:e9:7a:3b:f4:93:7d:68:95:e0:dc:91:79:d2:82
Serial Number (int): 88824165547925528973798132743893799554
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 66:8c:61:c0:5e:cb:c0:9e:8d:2d:ba:37:e7:84:76:82:01:80:91:f6
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): b8:93:41:8d:ce:cd:18:05:52:00:20:b6:af:bc:ac:57:a9:ce:f9:f9
Fingerprint (sha256): 4f:59:6b:cc:00:07:41:cb:88:14:ae:85:aa:0a:d1:3d:29:0a:e8:a3:83:01:c5:72:7c:56:aa:8f:d2:96:10:53

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate 3cx.okam.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 3cx.okam.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3cx.okam.ch
www.3cx.okam.ch

Other certificates including the domain name okam.ch

(limited to 100 certificates)
assistance.essentielweb.com
assist.voramedic.de
assist.werbas.com
assist.diavicom.com
okam.ch
assist.mgi.digital
assist.littleit.net
assist.mgi.digital
assist.oneeightyone.com
assist.oneeightyone.com
help.mensinga.it
helpdesk.ictzaak.nl
okam.ch
assist.abctelephonie.com
assist.werbas.com
assist.oneeightyone.com
assist.voramedic.de
support.exsto.be
assist.oneeightyone.com
mx1.os.okam.ch
assistenza.dieffesistemi.it
help.mensinga.it
assist.oneeightyone.com
assist.baeumlin-management.ch
asistencia.tuchoconsultoria.com
support.ukictltd.com
assist.abctelephonie.com
assist.oneeightyone.com
assist.diavicom.com
okam.ch
assist.bool.ie
okam.ch
portal.visionsoft.com.cy
assist.oneeightyone.com
mx1.os.okam.ch
asistencia.okadrive.com
assist.okam.ch
support.exsto.be
assistance.essentielweb.com
help.mensinga.it
asistencia.tuchoconsultoria.com
3cx.okam.ch
support.citylegalservices.co.uk
okam.ch
assist.voramedic.de
join.byzz.plus
assist.sladetech.co.uk
hilfe.skycom.gmbh
asistencia.tuchoconsultoria.com
assist.oneeightyone.com
assist.oneeightyone.com
support.zero2hero.community
okam.ch
assist.mgi.digital
assist.nichecrm.builders
assist.voramedic.de
assist.okam.ch
support.citylegalservices.co.uk
support.citylegalservices.co.uk
assist.sladetech.co.uk
assistenza.lrsa.it
*.okam.ch
assist.baeumlin-management.ch
help.mensinga.it
join.byzz.plus
asistencia.tuchoconsultoria.com
assist.baeumlin-management.ch
assist.sladetech.co.uk
support.ukictltd.com
assist.abctelephonie.com
okam.ch
assist.oneeightyone.com
assist.oneeightyone.com
assist.nichecrm.builders
assist.mgi.digital
assist.oneeightyone.com
join.byzz.plus
assistenza.dieffesistemi.it
support.citylegalservices.co.uk
helpdesk.evalink.io
assist.baeumlin-management.ch
assist.sladetech.co.uk
helpdesk.ictzaak.nl
hilfe.skycom.gmbh
support.ukictltd.com
assistance.essentielweb.com
assist.oneeightyone.com
assist.bool.ie
assist.nichecrm.builders
helpdesk.ictzaak.nl
support.ukictltd.com
assist.abctelephonie.com
support.exsto.be
assistenza.dieffesistemi.it
assist.oneeightyone.com
assist.okam.ch
assist.werbas.com
assist.oneeightyone.com
support.exsto.be
assist.oneeightyone.com

Certificate

The complete raw certificate details for 3cx.okam.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLhq9YNSSOIj+wtoPX4j
K0BkVy+ZLiHHlkWYeDGqNi4Y26Uwjj7/PGO5pLMtVQaDgc5Yi4NV/ZtPEqX2Inpa
21YtaMdmKLUeBvcjsXjY10N0RbFJZV0yVf5zYdar5jQIzWzk6SHOzssEmPks3NU1
8YL4pGu4xeWB21jMDIH7o4Cwte3C4fhVh8cPHlXIMp4AE79a3J6gpqdWKj6UFbIO
7+x5K4UCcZjgocd3o4PrQ2lgYSZa1AD5Tjba0qbI+t+yQEF4WlxbRzacDkQSoK5O
E9221BJMOGSCYGgQtykq+2cuq1kwxkB9O/4AcbGeY33d+53olqTFcrNb+YwGUq+U
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88824165547925528973798132743893799554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-13 15:58:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-15 15:58:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '3cx.okam.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19784115385563413653229072492266929323769816548486176196654345745607973721111431615363803586503548333595751275164164202757663999291669711822720243092899057201652565274791513370113835131091347773711884398518014982629479697979953499365950570709839413675636372246854761919775161853061742819027534260837871857854867955386957761927994911799825462175682119043185953447797991807845300789565680635699456816542567184571574820880826800926671375832777028427233332776946986275508240401313622566237691607570852280679676737826507769312894322036832800660022844810411668901330446981182207961973710580171863954739133198623072790221961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3cx.okam.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3cx.okam.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							668c61c05ecbc09e8d2dba37e7847682018091f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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