www.altis.ch

Issued by GeoTrust DV SSL CA - G4

About this certificate

This digital certificate with serial number 02:22:81 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.altis.ch,OU=GT13114453+OU=See www.geotrust.com/resources/cps (c)15+OU=Domain Control Validated - QuickSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:22:81
Serial Number (int): 139905
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: 0b:50:ec:77:ef:2a:9b:ff:ec:03:a1:0a:ff:ad:c6:e4:2a:18:c7:3e

Fingerprint (sha1): e8:00:29:34:be:12:e2:86:c2:78:0f:2d:fd:37:95:74:34:3e:8b:31
Fingerprint (sha256): f1:ce:0f:d6:6b:e0:d3:06:44:05:57:bc:26:c5:a4:7b:e5:d3:16:05:f5:c8:91:2e:9a:bf:a4:99:1a:68:64:d2

Issuing Certificate URL: http://gu.symcb.com/gu.crt

Revocation information

OCSP Server: http://gu.symcd.com
CRL Distribution Point: http://gu.symcb.com/gu.crl

Check the revocation status for certificate www.altis.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.altis.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.altis.ch
altis.ch

Other certificates including the domain name altis.ch

(limited to 100 certificates)
forms.logiforce.com
forms.reducemyexcess.co.uk
forms.itechforyou.com
data.altis.ch
*.portal.altis.ch
track.altis.ch
forms.reducemyexcess.co.uk
jobform.progebouwadvies.nl
order.eastlabsphoto.com
www.altis.ch
forms.reducemyexcess.co.uk
forms.reducemyexcess.co.uk
informes.ssixto.es
form.mecalife.com
forms.semigo.gr
forms.reducemyexcess.co.uk
forms.cs.zohohost.eu
application.creditdigital.info
formulaire.groupe-terresdefrance.com
forms.reducemyexcess.co.uk
formularios.imf.com
i6forms.i3clients.co.uk
forms.reducemyexcess.co.uk
forms.reducemyexcess.co.uk
forms.likebility.com
forms.basevision.ch
forms.reducemyexcess.co.uk
promote.hirenova.net
forms.cs.zohohost.eu
forms.reducemyexcess.co.uk
forms.reducemyexcess.co.uk
forms.reducemyexcess.co.uk
forms.lichtisten.com
www.altis.ch
www.altis.ch
forms.reducemyexcess.co.uk
*.portal.altis.ch
www.altis.ch
forms.locster.fr
crm.progebouwadvies.nl
www.altis.ch
forms.reducemyexcess.co.uk
secure.woodpark.ie
www.altis.ch
www.altis.ch
forms.reducemyexcess.co.uk
forms.cs.zohohost.eu
www.altis.ch
forms.reducemyexcess.co.uk
track.altis.ch
altis.ch
www.altis.ch
programmbuch.ruhrtriennale.de
forms.vermilion.uk.com
forms.reducemyexcess.co.uk
form.loungeup.com
forms.csu.edu.tr
forms.altis.ch
www.thefmcompanyuk.co.uk
www.altis.ch
www.altis.ch
track.altis.ch
*.portal.altis.ch
forms.gifted.systems
forms.cs.zohohost.eu
www.altis.ch
forms.reducemyexcess.co.uk
www.altis.ch
forms.reducemyexcess.co.uk
forms.swisslearning.com
form.suporte5estrelas.com
www.altis.ch
www.altis.ch
forms.sallnet.com
data.altis.ch
forms.reducemyexcess.co.uk
forms.secity.nl
forms.servertastic.com
www.altis.ch
forms.reducemyexcess.co.uk
advertise.hirenova.net
data.altis.ch
www.altis.ch
forms.reducemyexcess.co.uk
www.altis.ch
www.altis.ch
forms.reducemyexcess.co.uk
forms.sudolio.com
forms.reducemyexcess.co.uk
scoping.digitalxraid.com
forms.cs.zohohost.eu
forms.funeralsafe.co.uk
kontakt.ifcr.dk
forms.supervoice.eu
ventas.ssixto.es
forms.ovkcenter.se
cs.next-vision.co.uk
www.altis.ch
forms.reducemyexcess.co.uk
www.altis.ch

Certificate

The complete raw certificate details for www.altis.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z7Z2/3uEdGEsEBBsXS3
fznJ8OSzi8pUP2SVb0YNRQGxqyxLdkWGwt8RHknFXgDxdz3VJxYmfF0XWO/E18na
4vORR0EU0hhdC+ibtq5YBCLnmw2kBVNhWwGiCLPDfM8NQ8k0Mr9IAp3R+aN+yCMX
rC3DmXq17NMm3grG6MD/GD1G0d3JdM0XxdHOWBEVGFMe1UJ0AMKYzMME0klAjpRC
1zXFDetnN7Whoc/TLu4Pqm22XtHmVU0xhX10iuiRofcFuUN+dMzb8xabIKY5ojiu
XI+z+mg6L6WG0AJypuowl5iyvhGvS20Do0yJFD0owHyF6DwsPRyYG9XKUrBXSWjD
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 139905
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-10 07:07:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-11 21:31:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT13114453'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)15'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - QuickSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.altis.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27976997751525760658360699369633851986936960240312939801738576192381729446739815807890011072986851788706460301598218686733822129024340776970568778394741214009186735691698276036358693285601198771896644852716319324117879961883280147483584421148325193076039913334428600237604830923694085789171699136591033831549317127283714148034147251068092577658126464806700379908114075619396920751603065964184643422307268655694405043382775699507650334637200825988056152489863225192245068261689881840794762125128677423497496595546387490689366615736793775099183073069677979673831769955800870685834463518088109341950760551847694717993741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0b50ec77ef2a9bffec03a10affadc6e42a18c73e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.altis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altis.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gu.symcb.com/gu.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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