*.paweco.ch

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 48:3b:d9:ec:0e:28:7f:78:d8:dc:bd:34 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.paweco.ch,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 48:3b:d9:ec:0e:28:7f:78:d8:dc:bd:34
Serial Number (int): 22355276438472697650568019252
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: bc:30:90:25:86:d2:2d:60:75:e5:cc:4b:b0:80:7e:09:9b:76:d8:31
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): d0:4d:f9:cb:d7:b0:fd:59:1d:6c:af:e5:cf:fa:e7:dc:47:7c:a6:ee
Fingerprint (sha256): 7e:47:52:59:77:5a:5a:53:0f:56:84:86:ce:aa:82:24:fe:88:8c:39:42:24:ac:bb:9c:5c:41:99:08:34:74:0a

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.paweco.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.paweco.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.paweco.ch
paweco.ch

Other certificates including the domain name paweco.ch

(limited to 100 certificates)
admin.paweco.ch
admin.paweco.ch
www.paweco.ch
shop.paweco.ch
*.paweco.ch
admin.paweco.ch
admin.paweco.ch
admin.paweco.ch
shop.paweco.ch
www.paweco.ch
admin.paweco.ch
admin.paweco.ch
admin.paweco.ch
admin.paweco.ch
admin.paweco.ch
admin.paweco.ch
admin.paweco.ch
admin.paweco.ch
admin.paweco.ch
admin.paweco.ch
*.paweco.ch
*.paweco.ch
admin.paweco.ch
admin.paweco.ch
*.paweco.ch
www.paweco.ch
www.paweco.ch
admin.paweco.ch
admin.paweco.ch
admin.paweco.ch
admin.paweco.ch
*.paweco.ch
www.paweco.ch
admin.paweco.ch
shop.paweco.ch
admin.paweco.ch
*.paweco.ch
admin.paweco.ch
admin.paweco.ch
www.paweco.ch
tetris.paweco.ch
admin.paweco.ch
www.paweco.ch
admin.paweco.ch
shop.paweco.ch
www.paweco.ch
admin.paweco.ch
admin.paweco.ch
www.paweco.ch
admin.paweco.ch

Certificate

The complete raw certificate details for *.paweco.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WiL4LpaVzc0qtf0E4JM
V7kQ2VuWUFcXU0Bf7rEbYz5jjZBWwOXpz2POfe9PnfyoJMACkSXn5w5Sv5AJI8dd
wOzMWYddQTxQbeu2PdgGGky8PIPwAyjs/QTd7AcXkxLdrghe98Dz92vU1H+XrNQS
DCGq5qLEs+bBL6a5+RdQRmL0I+NgQc+xyE0zectbfdanwm+xQmeWVIIQyYFSnEkx
RG1Damms43Z3p5ypZqbYPghDOgM/AWUAJoV2uWzV49vvCzOcWqemE3kTFD7pgBKA
wNvjH99BNmJFvGoo/ZS0ubKR2KJ8pkf1pmQESUU721ZT9R82RsMfWpuPoD6NB1xP
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22355276438472697650568019252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-24 17:31:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 17:31:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.paweco.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26435359488108958242774787195952425499785820687854074362935074896467913182117546005492227513554070780327559519806616122336736370018992589388004726015888028394714133860070837587494566366465544464501433228310975475163500551807560823209694254495642622456121626949801441288271226652369107916224586031717383637495847295905298908671563246160434433397428079146699493625431130091405558132007358433751239304240946646924911679183522456668440712933864902248075168884833747801658430144558015684101869439774841642009120114704137442768033049369600625854051910181972197933785750914262827113998659085295019497195448775239410713907161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paweco.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paweco.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc30902586d22d6075e5cc4bb0807e099b76d831
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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