stg-wifi-gast.stgag.ch

- thurmed AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 08:dd:43:ee:ad:54:ff:8d:7d:0f:ac:d1:6b:3c:be:4d:ff:51:26:e0 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

thurmed AG

Organization: thurmed AG
State / Province: TG
Locality: Frauenfeld
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 08:dd:43:ee:ad:54:ff:8d:7d:0f:ac:d1:6b:3c:be:4d:ff:51:26:e0
Serial Number (int): 50606308596224518459255966290541439380553279200
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 4e:8c:e1:3c:67:0a:4b:87:a8:80:eb:8a:3e:ae:7c:b3:4e:a7:9f:b5
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 5a:a4:6d:99:e0:5b:73:0d:27:48:8c:2d:98:76:ee:e6:15:2e:f6:65
Fingerprint (sha256): b5:02:15:82:e8:00:50:9e:ce:83:f2:f4:5e:35:62:1e:58:f9:e7:8c:e4:4b:79:99:f9:40:f8:8e:f7:9d:f4:bc

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate stg-wifi-gast.stgag.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stg-wifi-gast.stgag.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stg-wifi-gast.stgag.ch

Other certificates including the domain name stgag.ch

(limited to 100 certificates)
imito-test.stgag.ch
af.stgag.ch
www.stgag.ch
pol.swiss
pol.swiss
pol.swiss
rekrutierung.stgag.ch
pol.swiss
pol.swiss
stgag.ch
imito-test.stgag.ch
pol.swiss
imito.stgag.ch
imito-test.stgag.ch
pol.swiss
pol.swiss
www.stgag.ch
mail.stgag.ch
pol.swiss
www.stgag.ch
stgag.ch
www.stgag.ch
www.stgag.ch
stg-xapf.stgag.ch
stg-xapf.stgag.ch
am.stgag.ch
nova-sc.stgag.ch
stgag.ch
*.stgag.ch
stgag.ch
stgag.ch
jobportal.stgag.ch
pol.swiss
www.stgag.ch
imito.stgag.ch
imito.stgag.ch
www.stgag.ch
stg-xapf.stgag.ch
jobportal.stgag.ch
imito-test.stgag.ch
pol.swiss
expe.stgag.ch
*.stgag.ch
*.stgag.ch
*.stgag.ch
stgag.ch
*.stgag.ch
imito.stgag.ch
imito-test.stgag.ch
pol.swiss
imito-test.stgag.ch
imito.stgag.ch
pol.swiss
jobportal.stgag.ch
jobportal.stgag.ch
stg-xapf.stgag.ch
stgag.ch
pol.swiss
jobportal.stgag.ch
stg-xapf.stgag.ch
expe.stgag.ch
www.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
pol.swiss
pol.swiss
imito.stgag.ch
stg-wifi-gast.stgag.ch
*.stgag.ch
imito.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
pol.swiss
pol.swiss
pol.swiss
imito-test.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
nova-sc.stgag.ch
imito-test.stgag.ch
*.stgag.ch
*.stgag.ch
stgag.ch
rekrutierung.stgag.ch
imito.stgag.ch
pol.swiss
stg-wifi-gast.stgag.ch
stgag.ch
jobportal.stgag.ch
af.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
jobportal.stgag.ch
am.stgag.ch
stgag.ch
stg-xapf.stgag.ch

Certificate

The complete raw certificate details for stg-wifi-gast.stgag.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQlnxmc2gkz/R4dxak7f
Vbnu74mtk1Y0qN/dA6ZxE30ObKDyXxC6kVZx87ysR/m2bxqm+okREQ0FeosGZAO9
IGt0q20GfcAhiMn9aX5r9uQp3zb9Kf+cQGMWz88HAt0fnQ20+XoAT/TVtXryIzVQ
B/bIQYmVfatHNQYcwHZSf3QNsgWWx3o7BkxZHTVr+9JOu9g8S6t8+q8/BaM9ggxj
4A7MMhmDqUF2BGSyk6/r4mZ/ytXMoCR++/yHDOodkP8KR9A2kV0m+a1lwa0fO1s/
3skT3EezZkIMWGelJH0OBAVtk1fZkWMbPwt1ZNpCmHrEC6mMT5hKAbK2OUgFNQeq
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50606308596224518459255966290541439380553279200
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-24 11:39:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-24 11:39:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frauenfeld'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'thurmed AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stg-wifi-gast.stgag.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25883490479411425903072548884353016505989136218546401631099031587129864843576910268246933872437474726311692859162057526262836810086468812650360554601021301705107094437452282749299232943325182970102650001199173559270054179468056743193187683526207229917068687868655817769547658702542214443196948962743659165796510755109737083597651643165790124807608461768437574671130645832554780405574591414004230998032519820826196792595860891015131847725493463693420420801663374826416721569383663389997715561415113882288044722966119559338889755894526535088378341030546751463915086877845946859416985303388737225826695345670203806034503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-wifi-gast.stgag.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e8ce13c670a4b87a880eb8a3eae7cb34ea79fb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		007d5701907740b18c58f46225737b52510039bafffbef2e8f00f8a059fc338c30a041a8e1f960ee579f093306d9ea57f48b4b0733fbedb4c797a954ccf2267a3a0edff9eb599b4775726194ae63a1551e49cbb740227c2cf6a4dcc63bfb8f96559d67474a0d2aa41b2740d08ea8e48626a70db826b45b8351cf517e8fc0d90d72990970c77e5b3d1abbc381602dae06390ee832d37c9759b1dec8a8ec563ef98e3860cdd02e19f43f722264181499e1a5da1723ecba5d63b266f89839781bd04143798c687a2ffa4e9f11c8ec4d8aac507c0998ab072db3eba0b167897cd2e46b91e5bbfff49d7378300386d62d4ee7093498e624dfc792dc61a7f23b0ec6fcbd8cbdd9670778d581c346f5a179a428a3ca7959d1d4c96ededcab56defaca4e8188fa160ad523fe932de9195323cce8cc4fa64991300816e4982982b43afdd3a2a48299bdbb49805c251f135588ce1c6da81d4e6d64fedb22c65f82323f1c39e745cb6326d6324e7f0f4401d75d3258c6c6c574f32e201e5236ed75806926b49a705dd79050a84dcc4ac39af832524fe09b9432cd255b6f1a5239d413a429f62792b0cbf744c48cbf1a03ea59db9acc90f474a236b897910f14649bc6f77af55b214decb9a6b4ea365a2b637d240aab3d89206d19b605b48bd3aa68d6ea440488213977767150a617beded2945b9faab4a0ff59880dc17183824694013bde24fc