outlook.ibsa.ch

- Swisscom (Schweiz) AG -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 10:c0:42:17:f9:cd:8c:f5:53:3d:04:86:e4:dc:05:96:5f:1a:d2:09 was issued on by SwissSign AG.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Swisscom (Schweiz) AG

Organization: Swisscom (Schweiz) AG
State / Province: BE
Locality: Worblaufen
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 10:c0:42:17:f9:cd:8c:f5:53:3d:04:86:e4:dc:05:96:5f:1a:d2:09
Serial Number (int): 95631352980710298169217537701606917533154857481
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: a3:a5:48:2a:99:a1:ab:dd:22:38:1f:4f:70:0e:ca:a3:4a:3f:ca:86
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 38:f2:43:30:f4:da:b3:a1:d0:4d:8e:a1:b1:bd:10:dd:49:79:54:d5
Fingerprint (sha256): 7a:92:77:14:46:e0:c2:21:d6:01:70:bc:1b:e2:f6:d4:af:b8:f9:8b:51:ae:9a:9c:d4:02:ab:09:a2:49:37:4c

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate outlook.ibsa.ch

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for outlook.ibsa.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

outlook.ibsa.ch
sip.ibsa.ch
sip.bouty.it
sip.ch.ibsagroup.com
sip.ibsa.it
sip.ibsagroup.com
sip.it.ibsagroup.com
uccweb-lfe11.ibsa.ch
uccweb-lfe21.ibsa.ch
ucc.ibsa.ch
webconf.ibsa.ch
uccweb-lfe41.ibsa.ch
uccweb-lfe42.ibsa.ch
uccweb-lfp51.ibsa.ch

Other certificates including the domain name ibsa.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for outlook.ibsa.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 95631352980710298169217537701606917533154857481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-07 08:43:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-07 08:43:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worblaufen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Swisscom (Schweiz) AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'outlook.ibsa.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 841370233549646184252524247806694863507924391810617392546427005381350278921077099399053757110629643700720150004928081188257714452257165252928284191661762673434356831109105265100272970131650525459642765435695673665597342217022419390016837298389606161818640822502429463546495194277641870854635480865900056414764433040885141652317860082465272351585262860592262965355326708947981841708639277291561751587762093918497921520354371597406654069216267666801593984021314307178977290256170731292471389030623068869325441741659854182071810791081235975746519133460891238996750942590129867335302192137586415211495779361255983317242298148550317406887985702330800976704764592069739830525395295681560683638996383920313188022795688777655024069171493165065049855068978405797856744506608098516562948294217696559796213384014410315412338573744671760200243313366930534194356410864016827202458159596294786660184921413135594892426014056411768840175784100190329181236269277012631660933980620759191837782915613120243047209385092723002217285486697012697616992983992045054540254896448315092286991038544134448013000637791449787966360642293351965441491553170386308868622433058770626299640792018303792281614121696381406611089154878188190436963688213989591044274013063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bouty.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ch.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.it.ibsagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb-lfe11.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb-lfe21.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucc.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb-lfe41.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb-lfe42.ibsa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uccweb-lfp51.ibsa.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3a5482a99a1abdd22381f4f700ecaa34a3fca86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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