plan-fabrik.ch

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 07:ea:56:74:b8:35:e6:6d:e7:c1:f5:fd:48:41:fa:5d was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=plan-fabrik.ch

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:ea:56:74:b8:35:e6:6d:e7:c1:f5:fd:48:41:fa:5d
Serial Number (int): 10521346970094729520975537283522493021
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6a:60:72:9f:16:1a:67:fa:95:a2:63:f5:29:27:89:b9:68:fe:25:58
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): a7:c6:f1:ee:18:b3:0e:51:c3:15:28:c6:f8:77:90:13:22:df:12:43
Fingerprint (sha256): 79:0c:13:bb:b1:4d:a0:e7:ce:c3:3d:82:56:a1:1c:d1:e4:ba:a9:ff:eb:60:c5:9b:e1:9d:4d:98:ee:78:0c:50

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate plan-fabrik.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for plan-fabrik.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

plan-fabrik.ch

Other certificates including the domain name plan-fabrik.ch

(limited to 100 certificates)
plan-fabrik.com
plan-fabrik.com
plan-fabrik.com
plan-fabrik.com
plan-fabrik.ch
plan-fabrik.ch
plan-fabrik.com
plan-fabrik.ch
plan-fabrik.com
plan-fabrik.com
plan-fabrik.com
www.plan-fabrik.ch
plan-fabrik.com
plan-fabrik.com
plan-fabrik.com
plan-fabrik.com
plan-fabrik.com
plan-fabrik.com

Certificate

The complete raw certificate details for plan-fabrik.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyFlQ/BVM4QPYCIXrtUT
8LBpbuhk8TlxkkVztV+J4RyHphQ5ntsOE94ijS554PKlYpLanPJHaRZHJ5GOxENz
FM1SZGAgcmT+SoroDo6zqInk3db5Bbo2Y5Vyn6HLl+r5x+DIpwn7En7yfxMG/Xi8
akqxeu57OGkXLK6BzlE10BZjvfyA+IXpOxueRssGPSrCUYJTZ/KBsQvTWodTl5RC
lKr36lTq8vedh+Qox+xn4V+bQm8ZTMjcpH4g4p57TLh4r2e5qlH2KDB7wpfhi+kJ
XEi5na6nuDSeqnpHdCMdd4taKOAZNWOOguWMBAqhX+mwYnnqyPSMlUwWVlbAfcyF
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10521346970094729520975537283522493021
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'plan-fabrik.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22613124557232381880187102696581419957519046022654951439246076187764098403709535203526185024326457791066503976917557501186520827230091033897264350847322744166850340974431826576429597391791641577092294280755381684394913156352316874874082442659034959661876301769386614205378078550194370460505214921352612592108146669214987715470624142270786169306166227010533311944579405149889386516515217224571503988688414079780345601166513091983455046956197162516476866236367929682602677511772658297198680893063719413531838988508495853251276335782611537927290050483297689074327417847131396496525612245124542588030584542323323840529821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a60729f161a67fa95a263f5292789b968fe2558
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan-fabrik.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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