*.isontic.ch
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 8b:16:ea:4e:27:81:6d:28:13:70:23:8b:62:7b:6a:be was issued on by Google Trust Services LLC.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.isontic.ch
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 8b:16:ea:4e:27:81:6d:28:13:70:23:8b:62:7b:6a:beSerial Number (int): 184881674220861385435934187400625613502
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: e6:53:36:ba:0d:fb:b9:e5:02:cd:9b:61:92:52:2c:1e:0b:76:a7:87
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): f0:c4:67:3f:52:d6:2d:ad:78:44:c7:a7:da:7c:09:8c:3e:cf:07:85
Fingerprint (sha256): c1:7e:07:fe:33:bf:09:42:bc:61:e8:2d:cf:2a:01:16:5e:c2:57:2b:f4:07:54:d2:af:0e:c4:c6:f7:12:1a:01
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/p6KjDcSrUWQCRL Distribution Point: http://crls.pki.goog/gts1p5/EF0Sp5GLeFY.crl
Check the revocation status for certificate *.isontic.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.isontic.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.isontic.ch
isontic.ch
isontic.ch
Other certificates including the domain name isontic.ch
(limited to 100 certificates)
Certificate
The complete raw certificate details for *.isontic.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIRAIsW6k4ngW0oE3Aji2J7ar4wDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMwMTE5MTkwMDI1WhcNMjMwNDE5 MTkwMDI0WjAXMRUwEwYDVQQDDAwqLmlzb250aWMuY2gwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDSCDmqQc1AblB7KNoqGJIJ+9OJ0uCfhOkunihvTth6 ZP+0QNS1aU/romuSXDcsSsF4qlvvQWe72CUsUvZ8KkwLvxXB2mZPL9O0TsK2WG1B x0aJ+TTQv/XD5SNEBLjOdAJzWY+sOkDjPRy/gQZAv8+BMa/FYX4i6SmtTHM36GFG kjGz/NUWJ+1re+lAOz5qB8fhGjHm61yr6CXOkJ/e8dDgKgN/fOKX+GC1Cl5HK/Ud POZmKZpuynscCa9UrWr26myF4DZ3Gl9r3T0EtTF0QSO91q7JirJqVlpmhFmiK1PV 7bhVKw+v2PcSWwXJXeTaxoG9wmn0RzcEy+mKEV9iUm8xAgMBAAGjggJ+MIICejAO BgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQU5lM2ug37ueUCzZthklIsHgt2p4cwHwYDVR0jBBgwFoAU1fye Dd8eyt0Il5duK8VfxSv17LgweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzABhilo dHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFwNS9wNktqRGNTclVXUTAxBggrBgEF BQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMXA1LmRlcjAjBgNV HREEHDAaggwqLmlzb250aWMuY2iCCmlzb250aWMuY2gwIQYDVR0gBBowGDAIBgZn gQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Js cy5wa2kuZ29vZy9ndHMxcDUvRUYwU3A1R0xlRlkuY3JsMIIBAwYKKwYBBAHWeQIE AgSB9ASB8QDvAHUAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGF y55GeQAABAMARjBEAiAP4qrEiItKOJbUgQSXNrLjeUEloBqzbN/ZPWq7C1a/qgIg ZFomyD5J2MftTnsNFUQZVF/+fVRqg+VqkLY4YpHzqn8AdgDoPtDaPvUGNTLnVyi8 iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYXLnkZnAAAEAwBHMEUCIDcGQbs8IUC0Izig PgJmnxFaFkr0hw58lvB2lN6mVnf5AiEAmBq4t0ocSSjiZF7BEjfLRdhSLQ2nKyqL 31LVJEosnsQwDQYJKoZIhvcNAQELBQADggEBAJmeIO5o9dp75e6VHnO6GhfoU9jE lIp5fM2AorkPV6GfWW/2a4R1dGBOECK/p1KGT2rL6ZlTnijt9KUGFvdW38XHQY7A AG8Vgi5OuSYvX6cDA13UhbD0XP5XO4fxP7/k2ebnmEu0b3O3hWkkB0UETB7SmK4Z PrwuRz64MHWdYOoeDJOTJ4F5FC3xbfsC90bbh1PKIumQcDIfZmMu1hEDa4RkhZt6 r86fQSJDwE2sblrmNxAo41W3mEuK7WmPyQmhRC54xjGgEowatZkwEE6u1RxanhOD nzFgGSqNALnohYsK8BA38RuctTBYhBOKBxbbBO61mwpe7Jg1b2Bl5NGngs0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gg5qkHNQG5QeyjaKhiS CfvTidLgn4TpLp4ob07YemT/tEDUtWlP66Jrklw3LErBeKpb70Fnu9glLFL2fCpM C78VwdpmTy/TtE7CtlhtQcdGifk00L/1w+UjRAS4znQCc1mPrDpA4z0cv4EGQL/P gTGvxWF+IukprUxzN+hhRpIxs/zVFifta3vpQDs+agfH4Rox5utcq+glzpCf3vHQ 4CoDf3zil/hgtQpeRyv1HTzmZimabsp7HAmvVK1q9upsheA2dxpfa909BLUxdEEj vdauyYqyalZaZoRZoitT1e24VSsPr9j3ElsFyV3k2saBvcJp9Ec3BMvpihFfYlJv MQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 184881674220861385435934187400625613502 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 19:00:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-19 19:00:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.isontic.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26514100066871764058601503743124084881199550590999445863216407340849906821151265689801871077111055538964810082337335138321442159680827685907741429209079698795650658000699202253232116567139845005572655104654194927066055074754003853994726152178521015822933164573113506722404628840970672215488546177354681837866388635583231194840249475126891263005252940318353405980396180958135243685844007979333105984997351751744852626652367256283982682309823020626069110986954602816016881747609000166831871602259151220428286971006996955627721891326057261844718375181105722741962889651904265931328397051337047513901635726615335136292657 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e65336ba0dfbb9e502cd9b6192522c1e0b76a787 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/p6KjDcSrUWQ' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isontic.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isontic.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/EF0Sp5GLeFY.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000185cb9e4679000004030046304402200fe2aac4888b4a3896d481049736b2e3794125a01ab36cdfd93d6abb0b56bfaa0220645a26c83e49d8c7ed4e7b0d154419545ffe7d546a83e56a90b6386291f3aa7f007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000185cb9e466700000403004730450220370641bb3c2140b42338a03e02669f115a164af4870e7c96f07694dea65677f9022100981ab8b74a1c4928e2645ec11237cb45d8522d0da72b2a8bdf52d5244a2c9ec4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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