webmail.avesco.ch

- Avesco AG -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:95:b3 was issued on by GeoTrust, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Avesco AG

Company registration number: OoS4dDFkI72XT9lX7PtQBP2LpBgI-nLX
Organization: Avesco AG
Organization unit: IT
State / Province: Switzerland
Locality: Langenthal
Country: CH

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:95:b3
Serial Number (int): 169395
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 92:15:e1:b3:22:8d:c5:74:69:c2:38:e6:21:fd:25:22:9f:1c:eb:87
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 0a:97:28:09:56:0f:0d:21:88:ff:90:4f:83:24:f4:98:7f:5f:c4:4a
Fingerprint (sha256): 69:5f:5c:08:7e:0d:df:f9:1a:54:84:38:c8:d3:08:f3:34:7a:c4:07:56:ad:03:91:58:3a:ae:94:71:e8:be:30

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate webmail.avesco.ch

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.avesco.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.avesco.ch
mail.avesco.ch
clas8ch0.avesco.ch
rpc.avesco.ch
webmail.avesco.ch

Other certificates including the domain name avesco.ch

(limited to 100 certificates)
transformers.avesco.ch
sempach.avesco.ch
intern.avesco.ch
tools.avesco.ch
sempach.avesco.ch
cards.avesco.ch
2017.avesco.ch
intern.avesco.ch
tools.avesco.ch
staplershop.avesco.ch
tools.avesco.ch
sempach.avesco.ch
avesco-shop.ch
da.avesco.ch
tools.avesco.ch
service.avesco.ch
transformers.avesco.ch
mi.avesco.ch
sempach.avesco.ch
crm.avesco.ch
trace.avesco.ch
intern.avesco.ch
events.avesco.ch
trace.avesco.ch
service-forum.avesco.ch
tools.avesco.ch
2017.avesco.ch
tools.avesco.ch
sempach.avesco.ch
*.avesco.ch
staplershop.avesco.ch
avesco.ch
service.avesco.ch
wm.avesco.ch
sempach.avesco.ch
tools.avesco.ch
tools.avesco.ch
meisterschaft.avesco.ch
avesco.ch
bauma.avesco.ch
staplershop.avesco.ch
transformers.avesco.ch
meisterschaft.avesco.ch
service.avesco.ch
transformers.avesco.ch
tools.avesco.ch
staplershop.ch
staplershop.avesco.ch
avesco.ch
meisterschaft.avesco.ch
sempach.avesco.ch
avesco.ch
meisterschaft.avesco.ch
meisterschaft.avesco.ch
avesco.ch
service.avesco.ch
avesco.ch
wm.avesco.ch
cargo.avesco.ch
intern.avesco.ch
webmail.avesco.ch
service.avesco.ch
avesco.ch
myservice.avesco.ch
tools.avesco.ch
transformers.avesco.ch
intern.avesco.ch
avesco.ch
em2016.avesco.ch
2017.avesco.ch
transformers.avesco.ch
transformers.avesco.ch
*.avesco.ch
cards.avesco.ch
service.avesco.ch
intern.avesco.ch
avesco.ch
webmail.avesco.ch
sempach.avesco.ch
service.avesco.ch
avesco.ch
em2016.avesco.ch
meisterschaft.avesco.ch
service.avesco.ch
avesco.ch
webmail.avesco.ch
meisterschaft.avesco.ch
sempach.avesco.ch
webmail.avesco.ch
trace.avesco.ch
staplershop.avesco.ch
em2016.avesco.ch
sempach.avesco.ch
intern.avesco.ch
meisterschaft.avesco.ch
*.avesco.ch
intern.avesco.ch
events.avesco.ch
events.avesco.ch
service-forum.avesco.ch

Certificate

The complete raw certificate details for webmail.avesco.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcDMgP5ebhynMOLl/aVk
h2soar2UpF7i30MH2SMq7RgeBzmv6jSlodcosJSxg02y5Fz2Na36Q3irj8hwP/Nd
l5PwJ/42JRjlixS07tw8UBinmfwc6wQbttUVpl43+bYvqZQCl6dolaOIw6cPKYJr
i8sQtHNwhZ3pKwbCR8y+7O2PFF4gcQ4l9S+b0j+WhowhKIeoI3SAE8+tUcP/gBeW
7eJ4cJqWSZuJ+9sVA4Hm+opEDUXdwmHK/vR+tjorPar2AOBH5YdIhjDp8wrfCxlt
kTTYBfwdsS72ACsLOm/1nQQHHBZii+9APlKNDp+6NUhlVde+Tcs9WBaxMzLFYlxE
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 169395
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-20 16:23:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-22 19:48:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OoS4dDFkI72XT9lX7PtQBP2LpBgI-nLX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Switzerland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Langenthal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Avesco AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.avesco.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24964018731344458206809017085126227801021302917857782237475924854783463635243973136015752721024522099738914593952995403471943639285416729572346149727415514564166082916569343320400910018478329003248199666575065626712534049664761151782866000237056834730158711767858545369478746626421171425718757223182984913159159141322742728666521689408376008459221683462552885639022111697663261082346396658144746382887912269943919691677589354024227190987756821509647440614468120201855515013523854366706085616655705475381946263482284200105011593869128701599857861412998754312640880954494187796817202832177433027200651115845275902297167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.avesco.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.avesco.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clas8ch0.avesco.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpc.avesco.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.avesco.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9215e1b3228dc57469c238e621fd25229f1ceb87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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