connector.ebs.swiss

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 29:83:94:07:e3:c8:bb:56:08:76:f8:8d:50:0b:f5:9b:cd:e0:b8:5d was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=connector.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 29:83:94:07:e3:c8:bb:56:08:76:f8:8d:50:0b:f5:9b:cd:e0:b8:5d
Serial Number (int): 237002914527856415129893457507087304365453654109
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: a0:99:50:24:ca:55:bc:73:ed:49:eb:44:d8:b0:b5:0d:eb:7b:52:35
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 59:7b:61:08:a4:ad:e0:c7:58:5a:f9:bd:22:4e:97:71:4c:56:53:cc
Fingerprint (sha256): 02:ac:2b:62:78:d0:70:66:02:e7:9e:26:19:7d:f1:5a:b5:a7:af:ad:55:d9:c4:22:b4:74:1d:11:a0:04:7b:95

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate connector.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connector.ebs.swiss

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connector.ebs.swiss
www.connector.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)
connector.ebs.swiss
stecker.ebs.swiss
sso.ebs.swiss
hybridex.ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
www.ebs.swiss
ebs.swiss
*.ebs.swiss
sso.ebs.swiss
ebs.swiss
ebs.swiss
www.ebs.swiss
www.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
ebs.swiss
geoportal.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
geoportal.ebs.swiss
geoportal.ebs.swiss
sftp.ebs.swiss
salary.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
hybridex.ebs.swiss
mdm.ebs.swiss
www.ebs.swiss
ebs.swiss
ebs.swiss
lora.ebs.swiss
asset.ebs.swiss
connector.ebs.swiss
ebs.swiss
testsalary.ebs.swiss
www.ebs.swiss
salary.ebs.swiss
connector.ebs.swiss
www.ebs.swiss
*.ebs.swiss
lora.ebs.swiss
geoportal.ebs.swiss
lora.ebs.swiss
www.ebs.swiss
my.ebs.swiss
stecker.ebs.swiss
asset.ebs.swiss
lora.ebs.swiss
*.ebs.swiss
www.ebs.swiss
ebs.swiss
betrieb.ebs.swiss
*.ebs.swiss
ebs.swiss
ebs.swiss
my.ebs.swiss
www.ebs.swiss
infoscreen.ebs.swiss
ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
geoportal.ebs.swiss
www.ebs.swiss
mydata.ebs.swiss
ebs.swiss
mdm.ebs.swiss
infoscreen.ebs.swiss
qm.ebs.swiss
geoportal.ebs.swiss
sftp.ebs.swiss
energieportal.ebs.swiss
ebs.swiss
connector.ebs.swiss
sftp.ebs.swiss
mydata.ebs.swiss
qm.ebs.swiss

Certificate

The complete raw certificate details for connector.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 237002914527856415129893457507087304365453654109
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-09 06:33:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 06:33:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connector.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 697424095431608568273938334877035992431553402576055794312799423107952869448781354007383845817964698723436131998126692901184594030925651741046921737765276644527072141376372467932871970316214576108313418158358141766147394559186762593655943585309004537559532283032623728983720108495882069601459497342449125457521489310266570251574235562096927378687823708052075953500960548006897883085121785472367966383401863754519364745004678073475263700855682500237887519621664609139631530729271891937672864631757846339521419851541569318844689805165685251325665565822104852960647049935829348245982729032949329198795659822524168054649553825230651044900324531996602772229262360885007286132060623372550259880184249766387026508529861700346845337566555401478189934563595632433950455249889137006601160123982162684906724346476992585272811645488069991288986395133876572207905057169262696135964835049890395604666911872482090750216864313868333236201639451254983033632043258335064095225300161028768376002060244999570117141329032254808872536238444747971887204820090294059191016076069471748545356905033463497378109290159758536718134874469525100869050157631793263678185789453651586993903382678906956646709491804024401239562454107716954635582758604633877471452982301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connector.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connector.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0995024ca55bc73ed49eb44d8b0b50deb7b5235
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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