applications1.nationalesuisse.de

- Schweizer-National Versicherungs-AG -

Issued by TeleSec ServerPass CA 1

About this certificate

This digital certificate with serial number 6d:89:71:f3:2e:fa:ec:3c was issued on by T-Systems International GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schweizer-National Versicherungs-AG

Organization: Schweizer-National Versicherungs-AG
State / Province: Hessen
Locality: Frankfurt am Main
Country: DE

T-Systems International GmbH

Organization: T-Systems International GmbH
Organization unit: Trust Center Services
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:89:71:f3:2e:fa:ec:3c
Serial Number (int): 7892965111222692924
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 06:66:d2:10:81:9e:c7:65:55:86:aa:03:30:d8:ad:81:ea:25:1c:45
AuthorityKeyId: 33:dc:9e:96:ec:d8:e8:35:1f:6d:90:1b:0b:38:a4:af:74:1b:c6:58

Fingerprint (sha1): 20:d0:3d:85:a0:48:ef:98:5a:d9:9c:2e:e8:5a:2d:89:c6:ae:74:7e
Fingerprint (sha256): e8:50:91:ee:e9:01:9c:d9:9d:0d:1d:b2:e6:66:24:d2:5e:d1:61:a7:d6:4b:b7:7d:df:04:f3:73:55:c0:d2:50

Issuing Certificate URL: http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_CA_1.cer
Issuing Certificate URL: ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%201,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?cACertificate

Revocation information

OCSP Server: http://ocsp.serverpass.telesec.de/ocspr
CRL Distribution Point: http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl
CRL Distribution Point: ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%201,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*

Check the revocation status for certificate applications1.nationalesuisse.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for applications1.nationalesuisse.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

applications1.nationalesuisse.de

Other certificates including the domain name nationalesuisse.de

(limited to 100 certificates)
applications1.nationalesuisse.de
www.nationalesuisse.ch
www.nationalesuisse.ch
applications1.nationalesuisse.de
www.nationalesuisse.ch
www.nationalesuisse.ch
www.nationalesuisse.ch
applications1.nationalesuisse.de
www.nationalesuisse.ch

Certificate

The complete raw certificate details for applications1.nationalesuisse.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8x86onpXpi0Hf68U9tm
G+nthdksbCQGVC/xm9JBoe7D8E8dgE1DjKowDYQq5qM5+Bi61IVSz+DX1ugtLctI
nOrAAqlySPels0QifJz2xIAz9+kUxZjEZdBS45EU/Opsa61IESC0zAK4aRk5Zcjc
icBHdmR+IaFcI07f2gGkkjPvUKDNHu7KzFXq9r0hNvj60uX5mhGVQGzZG9IrS36H
bzBpqIR8IJaDpRJMGSpmcQnnHEqDAWMe5P9PuuRFhGdSfA6ALJEui/uQ5KT2/C59
jR1YwlJwOULOhSbpacy7564/d6tDtD9sL0JBxJYLMjmeU76zbmu7ugPXZ6nQ8oWk
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7892965111222692924
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'T-Systems International GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trust Center Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TeleSec ServerPass CA 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-09 09:55:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schweizer-National Versicherungs-AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'applications1.nationalesuisse.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21687586917441190656888551343768999815872264899378337650912303357241415797492202794473636239962460033923089821207624157298745377848548870550197311520958369101035291684366795297351289944908924956040026565568225888226823780870736701198920073322586224335833995666799264811333531967825322458548255908460540424189546368381041042864289210905102965519061388673082236918454413321882160859362238831414025841269950903046502992752454246177911880549941080898737363546629199953027792343185434175068067407484346624255027301325336298366881293489595232904781323248544316457566512900982137655114075313074237809282331697073446466200773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 33dc9e96ecd8e8351f6d901b0b38a4af741bc658
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0666d210819ec7655586aa0330d8ad81ea251c45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.7879.13.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.telesec.de/serverpass/cps.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%201,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?certificateRevocationlist?base?certificateRevocationlist=*'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.serverpass.telesec.de/ocspr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.serverpass.telesec.de/crt/TeleSec_ServerPass_CA_1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ldap.serverpass.telesec.de/cn=TeleSec%20ServerPass%20CA%201,ou=Trust%20Center%20Services,o=T-Systems%20International%20GmbH,c=de?cACertificate'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applications1.nationalesuisse.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0075c2b8f10e22e6d254c943a35c08738ca829eb94295d23c5474ca499b0c4eb111fd73bd9f53cfb9f8df098e38ede718378b478a27ec8f3a3fcdf5b314e7d5a6d624ba8571af4cd0b3e6d65abba04aed5b99935b6a85dd2802c1dca1fa803a2e7f967c8abd1e702727d666e9bad7187839d7eede8e5d5181a3c668a780f2ef2f75a0707fdacf9dd8b0d3dab4b5731fc00c68ea1ff2393deba3987ea5064f51d7cbe4f22f517b637e7f5c186f1f16409186e91a09ead0dff4099892241db082d57939058a772f8549ac2b29c7b1a8b31d9cbbf01aa2ee57442522fa7b52b0de9d7ddeb1e291c6f8ce45ee0cfeb11bdc5f51e551115aab79e2f77aa396f40a1130a