webmail.brezelkoenig.ch

- Brezelkönig AG -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 14:72:2a:6d:59:03:61:39:eb:e2:30:dd:45:4d:78:08:e9:9c:24:45 was issued on by QuoVadis Limited.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Brezelkönig AG

Organization: Brezelkönig AG
Organization unit: IT
State / Province: Luzern
Locality: Emmenbrücke
Country: CH

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 14:72:2a:6d:59:03:61:39:eb:e2:30:dd:45:4d:78:08:e9:9c:24:45
Serial Number (int): 116725796294215250333621985145640021044250813509
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 70:5d:eb:d0:49:a6:96:66:1c:0d:c5:e0:b1:6a:f2:8a:25:a1:d1:e3
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): ca:5c:6e:28:67:33:58:a0:6d:c5:a6:e7:ed:ff:e5:78:86:90:0f:62
Fingerprint (sha256): b9:7e:27:38:84:16:e5:33:33:1a:af:9b:44:58:16:96:3a:f6:95:ec:94:23:14:e5:d7:da:ef:9e:0e:77:62:b5

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate webmail.brezelkoenig.ch

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.brezelkoenig.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.brezelkoenig.ch
autodiscover.brezelkoenig.ch
brezelkoenig.ch
mail.brezelkoenig.ch
ssl.brezelkoenig.ch
fileshare.brezelkoenig.ch

Other certificates including the domain name brezelkoenig.ch

(limited to 100 certificates)
brezelkoenig.ch
ditsch.de
webmail.brezelkoenig.ch
brezelkoenig.ch
tezaaa.com
ditsch.de
brezelkoenig.ch
the22murdersofmadisonmay.com
app-staging.getayra.com
brezelkoenig.ch
octosdigital.com
webmail.brezelkoenig.ch
ditsch.de
sriharsha.dev
ghneurosurgicalalliance.org
www.marcosdourado.com
login.staging.brezelkoenig.ch
aarnavjindal.com
gokulamdroptaxi.com
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
www.softwarelc.com
brezelkoenig.ch
ditsch.de
remote.brezelkoenig.ch
brezelkoenig.ch
www.scandiac.us
login-test.new.de
www.mairimed.com
auth.gluegroups.com
webmail.brezelkoenig.ch
tumascota2022.com
brezelkoenig.ch
ditsch.de
brezelkoenig.ch
brezelkoenig.ch
tezaaa.com
www.zmy.pw
algoritmo9.site
ghneurosurgicalalliance.org
login.staging.brezelkoenig.ch
oivis.com
brezelkoenig.ch
ditsch.de
app.brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
brezelkoenig.ch
*.brezelkoenig.ch
web.feedad.com
ditsch.de
bingo.remotesocial.app
design.joybird.com
brezelkoenig.ch
app.caddygo.ru
brezelkoenig.ch
webmail.brezelkoenig.ch
www.raugh.club
brezelkoenig.ch
ditsch.de
blog.pirika.org
brezelkoenig.ch
brezelkoenig.ch
letspark.gr
brezelkoenig.ch
brezelkoenig.ch
webmail.brezelkoenig.ch
0xgn.com
*.brezelkoenig.ch
gamescoin.pacta-cloud.app
brezelkoenig.ch
firatkirmizi.com
brezelkoenig.ch
cv.hofs.dev
ditsch.de
webmail.brezelkoenig.ch
ditsch.de
ditsch.de
dev.developer.viviware.com
ditsch.de
ditsch.de
staging-admin.lvmhcomplianceescape.com
brezelkoenig.ch
ditsch.de
remote.brezelkoenig.ch

Certificate

The complete raw certificate details for webmail.brezelkoenig.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumYZBmZqItLkVqPKKe1z
kfe7Cq3z4JRKZs2bgMYBYe3ITwZ+i51e+wGf1LJJEw7+9OE6V/3VAWJnkNID5z4j
jyxKl9f4fQu4SsBAYY9nn1IkEFD+SWA+RhveiyZim6fhfHl3tFC+FhRhBzLkBhKY
PNvBiDmbkAb8tCyJvmghU1nPGIvbgRasWrpxFtx0ibeNcHm9CfmKYQXoO8pQU05L
GfDkWnQ0pW6eKHfVLC7xyZNrCBkQI8Q6A/0ZWYnSwB1dQnYe7sbsNsMFXzXcNx9L
CNMfs6AN1apUK3nGjFlw/A28ZTWm9PSRsQay20JWJD45uOQraY5bgAU0QjUp8ZVB
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116725796294215250333621985145640021044250813509
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 12:44:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-03 12:54:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Emmenbrücke'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brezelkönig AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'webmail.brezelkoenig.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23530671002570015462344544573552367702978854192003834400108970516453088742841219988209967148951679423623360730239985083912694176039337109665050494012882319257060751787705938170134604320207451248743854204569717345231042134866375156236100914691476556962974375394167501706338181293177567751168063691266362687004179537009311815734943245717317366668935656815432775673135838897040525143457205149867958591204594713751886894346744518776894352440471785442474077101382175186505062234367560068176364806798745248266813115265676377944758093204726093844734932528072547210145538072013884015112388442628569600948419756250593997701517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.brezelkoenig.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileshare.brezelkoenig.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							705debd049a696661c0dc5e0b16af28a25a1d1e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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