www.nationalesuisse.ch

- Schweizerische National Versicherungs-Gesellschaft -

Issued by Thawte Premium Server CA

About this certificate

This digital certificate with serial number 74:a0:99:e6:4f:27:2d:d0:1c:36:76:0b:ec:d5:a3:aa was issued on by Thawte Consulting cc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Schweizerische National Versicherungs-Gesellschaft

Organization: Schweizerische National Versicherungs-Gesellschaft
Organization unit: IT
State / Province: BS
Locality: Basel
Country: CH

Thawte Consulting cc

Organization: Thawte Consulting cc
Organization unit: Certification Services Division
State / Province: Western Cape
Locality: Cape Town
Country: ZA

This certificate has expire since

Certificate Details

Serial Number (hex): 74:a0:99:e6:4f:27:2d:d0:1c:36:76:0b:ec:d5:a3:aa
Serial Number (int): 155024336464059230892077678357837620138
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 4f:18:6b:63:25:14:c2:47:51:c3:f1:16:40:c8:9d:b8:52:bb:15:33
Fingerprint (sha256): 59:6d:47:c3:c3:06:84:2f:ed:4b:fe:87:71:16:a9:c9:e0:fa:8e:68:10:0d:ee:6d:26:79:0f:41:d7:13:ed:3c


Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://crl.thawte.com/ThawtePremiumServerCA.crl

Check the revocation status for certificate www.nationalesuisse.ch

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nationalesuisse.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication

Extensions

4 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name nationalesuisse.ch

(limited to 100 certificates)
leben.nationalesuisse.ch
www.nationalesuisse.ch
www.nationalesuisse.ch
swissforms.nationalesuisse.ch
*.nationalesuisse.ch
extranet.nationalesuisse.ch
www.nationalesuisse.ch
leben.nationalesuisse.ch
nationalesuisse.ch
elmnet.nationalesuisse.ch
mobile11.nationalesuisse.ch
www.nationalesuisse.ch
www.nationalesuisse.ch
mobile01.nationalesuisse.ch
mobile10.nationalesuisse.ch
extranet.nationalesuisse.ch
decla.nationalesuisse.ch
karriere.nationalesuisse.ch
www.nationalesuisse.ch
*.nationalesuisse.ch
bsse.nationalesuisse.ch
karriere.nationalesuisse.ch
eplink.nationalesuisse.ch
igb2b.nationalesuisse.ch
extranet.nationalesuisse.ch
mobile11.nationalesuisse.ch
*.nationalesuisse.ch
swissforms.nationalesuisse.ch
leben.nationalesuisse.ch
www.nationalesuisse.ch
leben.nationalesuisse.ch
karriere.nationalesuisse.ch
leben.nationalesuisse.ch
www.nationalesuisse.ch
leben.nationalesuisse.ch
*.nationalesuisse.ch

Certificate

The complete raw certificate details for www.nationalesuisse.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvo720yUmUwnAaY99GuVl
IiFd2nydHhEP1Alt5sqdI5cqHb8y0R9Yec0p5LOQLOaqDMpAjaP+g3eh4H/5ciMO
kfBxks7hUjV6I+UCpRQJLIdcraA/IZjE0iHoJoFl6ZgXNbIMDq1qCHbQcYwF7GiH
DLozBk12lvocfTPXwypwD2EfDgpJdqKfUhdZV3o9lGOFW3dvxs4Ut19wILnEoWyi
VWds3jfhUdWVWmrkP2JVrVNeEFAyROs9PFPELo3ahRm0/cjk4e4abKr2ZFndAw51
+2jFwucciGRlj0a9jDlzI2G95cW6bpPwzU4U1PPLsrGIQ8dY5cdTkm9CCP8qLCc1
AEn5njrQm4cvWTu+UCBjxdQmeEPisH701lkqIU4DFkv1Wd3PMMAs1FaLvzH/v055
hXxV//4bzuQbF5q7+aTIDpGf71gtNE3X6ka7OMDTheN+WfLKkcjkrDSaHOPn2Gdl
lcWcWvKoU1/N/PdYMMtRzNyNpS3PvX3bBGt0eBH6tkplj4SDHyHKsoWo/l4k68nO
/+AcDq6VA29+Ro5Zv6x4kkNtdWUcLawNM3q1QBeq0lcNMynOaDtdxL1FcIoWNu6v
0e7GVAJS1/bzvMEnQng7d0RM2trVDZoZtqiyGxgfHkg8UGKt0h7/GzU1ABICem7e
2gydL7mrldlhOi8P1/Aa4u0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 155024336464059230892077678357837620138
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Western Cape'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cape Town'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte Consulting cc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Services Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte Premium Server CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2008-09-04 11:57:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-09-04 11:57:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Basel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schweizerische National Versicherungs-Gesellschaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nationalesuisse.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777410665441419338083918545556235010208783353592601699324221267539566552669147707819556268034779376029205601133264266889712859337245321110978208906625365197437302938718390028552310112204418268269343394059711087875288335636857295338437806429905197629847124548505427312787580480264848937655114319586116773985146183584181286060526855625563846604382532531575172632618789766719049105423891360253066572817614017669082311305455460596032148088936788959113580648302186784465599347755526393941041834723185053980123443884685767247200614604020272164341796694653425678205025071145890730141734178576311176114262628623901307448597027497121973585725554215287875285718305433271381064727924105842494054388764489916867039649118028876061617197829111406397137235072149580771991141514287267376264640746300197778621156141792471075744195771815872490597788536337502647385734452103047126353762634890001268905213511378797143425485124431807836961535985454680404703786030774896123418707214575663381475055458468856531593756447664885089458468238351164515221985277961141562220244486384476753090400603098395092090012118849588619618845343565191315988141562077082743282982991196635707508773755385087274287711603776281001788783013418757631871704155199560519041366549229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.thawte.com/ThawtePremiumServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (1024 bits)
		00929643d436a3d3eebfb7a5d12b8d3ff85ae3b77a8aaa1ff17553bde3c2a49367e9fef38a3b85541cfa69e1e46decfe16dad18f986661d9d336c0eb81fdb0f3511a9cc5b925dce11bc9e216ee912ae487e5553f62da99040836ad06bf627f7fbe796a5efc53b16f02eea1ba9b67888b4245102433af437a64b129492716744ab8