epd-test.thurmed.ch

- thurmed AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 57:e6:2b:2f:ec:cd:75:84:23:3d:3b:f1:f5:f5:06:44:f7:2f:df:db was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

thurmed AG

Organization: thurmed AG
State / Province: TG
Locality: Frauenfeld
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 57:e6:2b:2f:ec:cd:75:84:23:3d:3b:f1:f5:f5:06:44:f7:2f:df:db
Serial Number (int): 501815130593667004277737187876652430614957383643
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 9e:c4:77:73:d3:c5:38:e9:00:df:e8:a5:25:9e:c9:e3:54:3b:c8:69
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 9e:15:c4:5b:c0:85:34:38:82:b5:8d:65:f1:00:59:e5:38:c1:32:76
Fingerprint (sha256): e6:22:52:9c:14:31:94:71:2f:b4:0c:75:19:21:52:21:cb:8f:70:8b:1a:56:e0:45:4c:56:a2:a6:92:91:81:6f

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate epd-test.thurmed.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epd-test.thurmed.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

epd-test.thurmed.ch

Other certificates including the domain name thurmed.ch

(limited to 100 certificates)
am.thurmed.ch
am.thurmed.ch
aft.thurmed.ch
expe.stgag.ch
epd-test.thurmed.ch
af.thurmed.ch
aft.thurmed.ch
stgag.ch
expe.stgag.ch
af.thurmed.ch
amt.thurmed.ch
amt.thurmed.ch
epd-test.thurmed.ch
stgag.ch

Certificate

The complete raw certificate details for epd-test.thurmed.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 501815130593667004277737187876652430614957383643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-23 09:14:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 09:14:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frauenfeld'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'thurmed AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epd-test.thurmed.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 535925636412965767263842405110404479904156133781878228191766932682187053648797979838875197871253545840820328159588971184335105527043481093940765750875538318480863757195895095668337030388679411828491193797095739290783783906416030262820549958138194161029204404998397887300101887666613928908868357428581002116212228320494206161704929433251949790425921963617958832616950859981442592123721082971846477236559999134064008403624220754314017744135759753718819563151171554577831394953857479834541483296770029310356144608821784382541333320767260013813547332535246223235495606917396164160025820088155617231385678190551501350461556887234115463896322720047423343077956556888538113358932108438555640711527835849968191608105747678977136419469378403534809317020215173176268870254607940416006049757648059417433480255110142426535609357402209153052747145966913252629672547835149650365772603830501600345102094316382667190253424584975197703275709981398606393416239731801080764564241505531394403990377389990974109805187927987195482055887820791743593053661279539270262191324729057243645437936015393924627905936834310616628969828584850661880848172578705566179374681758284876519752220830663409518398609341632336691110752607195856003371240518347910088646927531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epd-test.thurmed.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ec47773d3c538e900dfe8a5259ec9e3543bc869
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
							025a0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001867d8d90490000040300473045022100cd02ed44414323f71044e2261a0d5e3c2f5107e1a39b08c6b1c719a21f64a51c02206058ebe510a3e636e4e653d669368738b2485eeaa57925e8ab465f9376536ecc00770073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b5000001867d8d93e700000403004830460221008f360c4a8b61a46d0cf0733b0c0fe77506fb29e54351ae7c4d49a59db4f272b1022100d0c5f7eafd3cf04e267a43983d23190e9fded5448231101ee4494ba126687fd6007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001867d8d94fe000004030046304402203b6a7e3e048e9d219f8320f77b604b84f4bf31850ede122cefc857ae72d6deb202206b72463b77a7104b85bc6bdc4786e5829ba6382c63b285ae0541fefb0fb52a0e007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001867d8d97f90000040300483046022100afbd66188767a3f0c026ca9cdcfd46154b7da6917826f442711765ab56473fac022100e1c164c8f8a6fa88ba75ddd8f8168dace9f8b2858ad1d8dd42cc8a16c0613b85007700874fb50dc029d9931de573e9f2899e8e4533b392d38b0a462574bf0feeb2fc1e000001867d8d9cf600000403004830460221009057830e0e58a74ff58158332c8de76cb45977f52b3f1a63fd3e7fb02d04f557022100a78c5d358d8f1c5ff461f76974302823ae7142aea4a1da0ec70abadac4a19d6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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