www.berdoz-optic.ch

- Marc-Etienne Berdoz SA -

Issued by Symantec Class 3 DSA SSL CA

About this certificate

This digital certificate with serial number 0f:ca:b4:bf:5b:74:41:19:05:dd:1d:d6:fb:2a:f8:eb was issued on by Symantec Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Marc-Etienne Berdoz SA

Organization: Marc-Etienne Berdoz SA
Organization unit: Terms of use at www.verisign.fr/rpa (c)05
State / Province: Vaud
Locality: Ecublens
Country: CH

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:ca:b4:bf:5b:74:41:19:05:dd:1d:d6:fb:2a:f8:eb
Serial Number (int): 20990929896809149503915270391949097195
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 1f:c7:cc:d6:07:32:4a:8b:de:9d:5b:bb:5d:38:48:8d:f6:57:27:d0

Fingerprint (sha1): 14:71:69:0f:f5:ff:db:df:62:8b:a9:6e:63:3d:3a:28:19:5b:aa:74
Fingerprint (sha256): da:3c:4b:14:01:84:df:7a:35:53:98:6b:5a:1e:4a:0c:a0:e8:aa:51:85:b5:f4:e2:5c:d6:11:30:55:59:b0:16

Issuing Certificate URL: http://so.symcb.com/so.crt

Revocation information

OCSP Server: http://so.symcd.com
CRL Distribution Point: http://so.symcb.com/so.crl

Check the revocation status for certificate www.berdoz-optic.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.berdoz-optic.ch

Public Key Algorithm

DSA

Key Size

2047

Signature Algorithm

DSA with SHA256

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.berdoz-optic.ch
berdoz-optic.ch

Other certificates including the domain name berdoz-optic.ch

(limited to 100 certificates)
berdoz-optic.ch
berdoz-optic.ch
shop.berdoz-optic.ch
berdoz-optic.ch
www.berdoz-optic.ch
shop.berdoz-optic.ch
esb.berdoz-optic.ch
shop.berdoz-optic.ch
www.berdoz-optic.ch
www.berdoz-optic.ch
shop.berdoz-optic.ch
www.berdoz-optic.ch
esb.berdoz-optic.ch
shop.berdoz-optic.ch
berdoz-optic.ch
berdoz-optic.ch
shop.berdoz-optic.ch
www.berdoz-optic.ch
berdoz-optic.ch
www.berdoz-optic.ch
shop.berdoz-optic.ch
berdoz-optic.ch
www.berdoz-optic.ch
berdoz-optic.ch
www.berdoz-optic.ch
shop.berdoz-optic.ch
berdoz-optic.ch
www.berdoz-optic.ch
shop.berdoz-optic.ch
shop.berdoz-optic.ch
esb.berdoz-optic.ch
berdoz-optic.ch
shop.berdoz-optic.ch
www.berdoz-optic.ch
www.berdoz-optic.ch
shop.berdoz-optic.ch
www.berdoz-optic.ch
berdoz-optic.ch
www.berdoz-optic.ch
shop.berdoz-optic.ch
esb.berdoz-optic.ch
shop.berdoz-optic.ch
shop.berdoz-optic.ch
www.berdoz-optic.ch
www.berdoz-optic.ch
www.berdoz-optic.ch

Certificate

The complete raw certificate details for www.berdoz-optic.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20990929896809149503915270391949097195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.3.2 (dsaWithSha256)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 DSA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vaud'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ecublens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Marc-Etienne Berdoz SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Terms of use at www.verisign.fr/rpa (c)05'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.berdoz-optic.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10040.4.1 (dsa)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27910912588993859943162079756965987973896404160284205345867927046857925991675784074362284132078239739847865845305887657180184089439877847403597843809920475348028843166144986883109820153044694558855274600067032563808804451010473330568149648296502894054091452766973797713820395580214336008414165488821962381586353624886609222214509984188456818590899739845046659357987796341930613503509555048460863871705514429315734509553946734036860723516677066310336314985899934889388636120899038610589929382209661567305434386449756006550877970352923459878473841854533061197355682245977875395372195859972948619627009728935547908930669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 96891404005034718987657817176405923614048439459057409747547666241636502839251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22348133621238787861671321074815871301017177878619695578854189184043275384703574068320129652414837497736033399160047752481663818390043522127813109573812117778243149100465885384290491064829117401123354885414370233709672781413084927534727682607348017202596394474280819756529825159524842111640425433954882564834833454049192150447018603130806671789399162068353365042745125291813905663808339554393555267020418809626197166208247670341008557157823233922648021061653833433500871200190336192014937922524107056311614607768288943407634950204324531564419087785559405927490072593459369866196860196306662721641406155895580009783771
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2080 bits)
 . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 9249134402171807021733688335874906236443555890404176944546294430429945119198827502335453503575838029626030943716013378058933131182264360482326324950880824509097753407504291991068483707708500388263363580338856121140924051345589418543466520514209499835109031598249674177992727280860214162774779224326867183994372781780329623132523377739657020501059533707353110742324646063348797221143025170754327629754924344783454550650055248423038425478068564264157032424257648659550946262117106554679480401721383886233935052236807366147790514942880427093591127173375839161149154016293170987661833428052095989785126654797400760302086

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berdoz-optic.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berdoz-optic.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://so.symcb.com/so.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1fc7ccd607324a8bde9d5bbb5d38488df65727d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://so.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://so.symcb.com/so.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.4.3.2 (dsaWithSha256)
 . . . . [c:0|t:3|false] BIT STRING (576 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 73398568365064876422654303306642270634886014232638600532840654503372852544734
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 74084880888366536214297436251888177534351249951687499607532269304984535329192