imito-test.stgag.ch

- thurmed AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 43:20:32:64:15:d1:ab:6c:39:13:b1:b2:be:cd:24:62:3c:7a:e7:74 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

thurmed AG

Organization: thurmed AG
State / Province: TG
Locality: Frauenfeld
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 43:20:32:64:15:d1:ab:6c:39:13:b1:b2:be:cd:24:62:3c:7a:e7:74
Serial Number (int): 383220395163085962991593702917685036171013056372
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 36:04:16:8f:bc:73:de:db:27:69:fd:b1:ba:13:89:06:3b:2a:02:db
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 64:ca:b0:27:47:88:01:ca:e7:0c:17:b8:f8:7a:51:cd:14:02:59:94
Fingerprint (sha256): 71:d5:c3:29:05:7d:cd:0a:cf:fc:a1:2e:01:c2:41:2a:c5:13:99:e9:c8:bf:d7:0b:e8:46:a3:17:ce:49:56:3b

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate imito-test.stgag.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imito-test.stgag.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

imito-test.stgag.ch

Other certificates including the domain name stgag.ch

(limited to 100 certificates)
imito-test.stgag.ch
af.stgag.ch
www.stgag.ch
pol.swiss
pol.swiss
pol.swiss
rekrutierung.stgag.ch
pol.swiss
pol.swiss
stgag.ch
imito-test.stgag.ch
pol.swiss
imito.stgag.ch
imito-test.stgag.ch
pol.swiss
pol.swiss
www.stgag.ch
mail.stgag.ch
pol.swiss
www.stgag.ch
stgag.ch
www.stgag.ch
www.stgag.ch
stg-xapf.stgag.ch
stg-xapf.stgag.ch
am.stgag.ch
nova-sc.stgag.ch
stgag.ch
*.stgag.ch
stgag.ch
stgag.ch
jobportal.stgag.ch
pol.swiss
www.stgag.ch
imito.stgag.ch
imito.stgag.ch
www.stgag.ch
stg-xapf.stgag.ch
jobportal.stgag.ch
imito-test.stgag.ch
pol.swiss
expe.stgag.ch
*.stgag.ch
*.stgag.ch
*.stgag.ch
stgag.ch
*.stgag.ch
imito.stgag.ch
imito-test.stgag.ch
pol.swiss
imito-test.stgag.ch
imito.stgag.ch
pol.swiss
jobportal.stgag.ch
jobportal.stgag.ch
stg-xapf.stgag.ch
stgag.ch
pol.swiss
jobportal.stgag.ch
stg-xapf.stgag.ch
expe.stgag.ch
www.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
pol.swiss
pol.swiss
imito.stgag.ch
stg-wifi-gast.stgag.ch
*.stgag.ch
imito.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
pol.swiss
pol.swiss
pol.swiss
imito-test.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
nova-sc.stgag.ch
imito-test.stgag.ch
*.stgag.ch
*.stgag.ch
stgag.ch
rekrutierung.stgag.ch
imito.stgag.ch
pol.swiss
stg-wifi-gast.stgag.ch
stgag.ch
jobportal.stgag.ch
af.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
am.stgag.ch
stgag.ch
stg-xapf.stgag.ch

Certificate

The complete raw certificate details for imito-test.stgag.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLr0nmYnx1h6txYUp4f7
XcLRIr4pkEhcrn5VNzzaud1DuqSy/fQePLWoZgCIVMSj4kRoltLEVngjLzRhHrcD
2Bxcv6YRkEgvbE5dFQCunQyQ/zkKV6XYbNleaCMuKn4oVif6UOllKTmennX4RlBl
ipWZywsZEjY17NVuCdmZGsbeHyBXPT02BWgYFk7bNL9MVa3FXbNkizaKboZyLqY+
FbtUfPJSpq2bZr/mi08tGIeTacfNA6lsDCTWCXKedhenSmtpUJvtL4TeQNqeOOGV
zZ9gNc/hBvsqaixIPCaZYE/V6HTgO9q4C6uy1+1p+173StIauyhzFVF+IgYTJShM
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383220395163085962991593702917685036171013056372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-09 09:18:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-09 09:18:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frauenfeld'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'thurmed AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'imito-test.stgag.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23320039327517536380246529988911364648178295490431875817513387651116442877638078682490963722281351948668070523400605703834763173590891782589447719228006994606752183594200150400487128726038855479858566851307001609838707227146465941974021748008012683006799396809574396536028164126383607980285451965800684249535382071690543103452708530162014517859924027520555851959210168937905565847699614236408258174321755810923417184406295083963869745974726783353059434466037419454356015167183080720851759844254452055652423853619103215560508615358684775564039961825888402589623518938673960448918481628258926735739442345247155975376107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imito-test.stgag.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3604168fbc73dedb2769fdb1ba1389063b2a02db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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