www.hsc.ch

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0e:c5:13:58:49:15:a0:34:18:2d:23:61:fd:eb:b2:ec was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hsc.ch

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:c5:13:58:49:15:a0:34:18:2d:23:61:fd:eb:b2:ec
Serial Number (int): 19632466782599503599253705590773101292
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 25:91:36:90:2d:81:31:4c:cb:dc:f1:b3:41:fd:1e:cb:62:83:c6:47
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): 3e:a1:8c:07:03:24:4d:e1:64:1b:5f:7f:a4:37:2e:84:3c:8f:e8:84
Fingerprint (sha256): b1:e6:fc:e7:7e:d7:59:2d:be:6a:18:51:b7:44:8e:93:2a:3c:78:bf:45:87:c5:97:de:23:be:8b:c4:b9:a9:59

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.hsc.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hsc.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.hsc.ch
hsc.ch

Other certificates including the domain name hsc.ch

(limited to 100 certificates)
www.hsc.ch
www.hsc.ch
mail.hsc.ch
mail.hsc.ch
www.hsc.ch
www.hsc.ch
mail.hsc.ch
mail.hsc.ch
www.hsc.ch
hsc.ch
www.hsc.ch
vertec.hsc.ch

Certificate

The complete raw certificate details for www.hsc.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArO9CofCTTblk6KZPfJ2o
cwSUhL74/TzrOBBPdbFEHIq0Bu4C/88j9JiRplV4rOOpfKfsj+LhTmghcShS6/Bh
JrEoe0pAQjRB0m7WPw0ViUBFfHd+N8+eFX/cs2G5iSP34dRk/nyxmBNS/DvlE/ww
6/5GRmIS80kCEo8ncb0t9CCDCfkaG0AxhZ2GsCsLQcjQNwJpwQefebqhd3DgiFwP
xKe95h1uerq7ZmIowcLlxym8TK7qfmg0Q4xIwH/I2XW8+XgL17BEBAxsv77UkLyY
OO3kyvOCgfVv3SRmFnLKwAg6/4XM0POcRKwO6nt37RZWxaUSVfXSdBGA41fQVOZh
F8m02xB99J3WESbkPKlV+xlZKaPZ1xE4BoPvLHAfEsEUNimWudsl9mC/jh8vqGOn
LDESdz3pKjPM+ECCk1j+UMT+dglrVudMUsaIznJ3owfCWNMl02FqocuSC2NOPfDa
4TXLm5Lb3byyyT1HnxPJTGbljIETqVW7mYD66SKxQY5Xw54TgU1Qy77fR61MBGhQ
zHTMiTpG7tHRC5JxeVFQJnq7kK9vVzCzzUR3bPcBP9tTrIycM/ZQr3d+/U2s9e1z
TV2k6KIr+AKpHkqdcR4Bvleyd2T+y7eM2xVU6j/Z+EXAlvLUb1uYFU9LFGZBIhUs
CU6QeCamSAGOrfk70Wa4PnUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19632466782599503599253705590773101292
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hsc.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 705511657810054597233172415974765452640890208272871818349193381947861721277006151088117162302481624889592882117357529747642504404784236484556215185769461823470685645035482546688983388137520481556257796761057498199048837515129134115099580367987487102619979773125910366500730899845298809532636147702184501188252333257554718247741400697575362112355860758426015726993212178530951882499802229109661413520641384841712311779714393629009641737390222251757385316892278068129240294293726208921690488596862427705816833208845532866536912893057657695987748762196746031251883582803471162250787350405636142877145083923412676565113295115272852908556297649047292343496320461877555399371029993359164433499230790678521933707335207020396101699566823150250944881555612509560375781312266773930643299103156324485335230023514248444695230748346622403901671855278717803341912471538834113553453478898559556313009241550122327264233418484638649260012949970835344881324260666330211350463697274050784923767879446990133026933066989446564398377788183482152446315669978945978982977081893391494637782915548546703517664996519163769701423912518693993256075603106055197533242522278869177057743436542150972122998896577140454409316630543830395547782464207845538835350437493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							259136902d81314ccbdcf1b341fd1ecb6283c647
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsc.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsc.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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