siapoc-dev.azure.css.ch

- CSS Holding AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 44:24:63:c2:d8:dc:a1:70:80:b6:83:69:6a:f5:18:bd:6d:c1:cd:2b was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

CSS Holding AG

Organization: CSS Holding AG
State / Province: LU
Locality: Luzern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 44:24:63:c2:d8:dc:a1:70:80:b6:83:69:6a:f5:18:bd:6d:c1:cd:2b
Serial Number (int): 389022889662513443787183603681772219313047063851
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: ed:f7:38:d4:71:88:de:93:aa:5c:c2:3e:f8:ef:e3:bd:26:4c:11:35
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): f6:c7:40:fc:75:81:74:03:b8:25:da:fe:4c:26:8a:57:f7:0f:94:42
Fingerprint (sha256): 01:c2:da:8a:d6:bd:0d:d5:e6:f5:51:02:7a:7c:d5:05:10:79:16:40:74:88:ec:8a:94:70:b8:04:ae:f8:47:6a

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate siapoc-dev.azure.css.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for siapoc-dev.azure.css.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

siapoc-dev.azure.css.ch

Other certificates including the domain name css.ch

(limited to 100 certificates)
tc901b0ee158de.css.ch
TC901B0E917DD7.css.ch
test.css.ch
TC901B0EBAEA9A.css.ch
TC901B0EBAEB56.css.ch
vrops.css.ch
TC901B0EBAEB34.css.ch
cv8ai1.css.ch
manual-int.css.ch
lnx51951.css.ch
cp1gw3.css.ch
lnx92091.css.ch
lnx51997.css.ch
pcs52064.css.ch
scrmi1.css.ch
lnx51952.css.ch
test010420221.css.ch
rstudio-connect.css.ch
TC901B0E924476.css.ch
tc901b0ed651c2.css.ch
TC901B0EBAEADF.css.ch
TC901B0E9242BE.css.ch
ccp05-02.css.ch
xmsd.css.ch
rm1-iseadm.css.ch
TC901B0E92452B.css.ch
PCS51027.css.ch
sysops.css.ch
lnx93096.css.ch
lnx55195.css.ch
f5lbdmz-intern.vpr.css.ch
nas97005.css.ch
qlikview124.css.ch
TC901B0ECBE829.css.ch
TC901B0E9242C4.css.ch
TC901B0EBAEB83.css.ch
waf-vpr.mgt.css.ch
lb-kobil-int.css.ch
TC901B0E9241A2.css.ch
pcs53054.css.ch
edh2-server.css.ch
qlikviewvpr.css.ch
www-tst.css.ch
TC901B0E92421A.css.ch
pcs53087.css.ch
TC901B0E924327.css.ch
lnx51196.css.ch
pcs92030.css.ch
pcs53098.css.ch
travel-dev.css.ch
crmi1.css.ch
pcs53104.css.ch
prometheus.k8s-dev.css.ch
*.k8s-dev.css.ch
TC901B0EBAEAC6.css.ch
findev11.css.ch
pcs92310.css.ch
confluence-d-int.css.ch
report2016.css.ch
TC901B0E924259.css.ch
jsa.css.ch
ppvap23.css.ch
ccp06-static.css.ch
TC901B0EBAEB09.css.ch
TC901B0ECBE7FD.css.ch
ts1-f5lbdmz-extern.vpr.css.ch
sbcint-ldaps.css.ch
smartfix-vpr.css.ch
siapoc-dev.azure.css.ch
k8s-alertmanager.css.ch
p10262-acme-test.css.ch
www-int.css.ch
TC901B0E917E59.css.ch
ccv01-01.css.ch
tc901b0ebaeb00.css.ch
pki-dev.css.ch
siebel-tst2.css.ch
aagm-dev.css.ch
TC901B0E9241D8.css.ch
cev13.css.ch
lnx92090.css.ch
pki.css.ch
ccd06-02.css.ch
rm1-iserad.css.ch
ccv01-01.css.ch
pcs92929.css.ch
cev13.css.ch
TC901B0EBAEB58.css.ch
pcs92936.css.ch
pcs92794.css.ch
aut-www-tst.css.ch
TC901B0EC09952.css.ch
p10262-acme-test.css.ch
www.css.ch
st2ext3.css.ch
TC901B0EBAEB1A.css.ch
myguide.css.ch
alertmanager.k8s-tst.css.ch
st1ext11.css.ch
cev23.css.ch

Certificate

The complete raw certificate details for siapoc-dev.azure.css.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jGZ5BbTOIgIa9bywyG8
guwaF0P/omra/OM8ZRrHv9MQJSpDqwlzoZztsc52anzX/XB8/EOn/J/U/wMX4CEA
SB/cuMSgJzBhBUBfCgWV5jy1RazcCifbq+WIEn0SbxFIPcDHA7JtnY1kbhYiM6Ip
ea6LdQ47O3wPNofc1YuKBJxe1++mPEXPavt6TQ9ZfYXaFqw5/c4EwcXxoneGNzlq
kqar5YCjKY8VpEFemCOor8QcsgLb2XhIUYKnuSZHWR4f+sefpLOopacRkApLpwmf
d+hxGRZkzPrW/U/6pXEXx9L36M6i7mcbtjG60ismuRj8Se6FD+Y8WQqjBA++Y5cS
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389022889662513443787183603681772219313047063851
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 15:01:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-14 15:01:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CSS Holding AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'siapoc-dev.azure.css.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31079082253723038801492058434125477166456408880939605015761855790140401917127756059906274388704223071094457588847978336702688970568124140637216229284180458167180202357340552593161410247505355021727924682555615536854473216908956608066422273404747774297992667973635833067963485950008194654375271506053067308919614692931809585639886365771279009757943845501226087704675822717500899715072087273682130309686010479128396354160604549758084583591471595522965635513972552115425403395031886536984607718439810036798175281936287681061478245579713466499991199033820625468956994340385900283555028713934709951421405942592559522452133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siapoc-dev.azure.css.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edf738d47188de93aa5cc23ef8efe3bd264c1135
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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