gp-ext.mobiliar.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 65:c0:07:9e:a7:41:e5:0d:76:a5:fa:0f:f5:46:ba:1d:2f:ce:6c:16 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gp-ext.mobiliar.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 65:c0:07:9e:a7:41:e5:0d:76:a5:fa:0f:f5:46:ba:1d:2f:ce:6c:16
Serial Number (int): 580890474704264387751097091440333775283101264918
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 5b:b2:95:56:b9:e0:28:ec:f2:27:a5:f3:b8:d3:ee:2c:a7:3b:4a:fa
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 74:6b:7a:23:96:32:e4:e4:9e:9e:44:bf:66:d2:0f:c8:63:5a:3f:80
Fingerprint (sha256): 02:dc:44:99:5f:1b:85:cf:a1:11:f5:19:57:0a:d1:54:62:1e:be:4f:73:97:2f:ab:57:8e:b4:91:8b:98:59:0d

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate gp-ext.mobiliar.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gp-ext.mobiliar.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gp-ext.mobiliar.ch

Other certificates including the domain name mobiliar.ch

(limited to 100 certificates)
standortcheck.mobiliar.ch
vpn.mobiliar.ch
gp-devsec.mobiliar.ch
cloud.campaign.mobiliar.ch
gp-ext.mobiliar.ch
securemail.mobiliar.ch
m24pp.mobiliar.ch
client-auto-i-dat.mobiliar.ch
vorsorge.mobiliar.ch
leonteq.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
leonteq.mobiliar.ch
marke.mobiliar.ch
gp-portal.mobiliar.ch
gp-gw-prod.mobiliar.ch
video.mobiliar.ch
*.content.mobiliar.ch
meteo-alarm.mobi.ch
gp-gw-dev.mobiliar.ch
tinelstest.mobiliar.ch
sos.mobiliar.ch
test.mobiliar.ch
gp-prod.mobiliar.ch
strategiemap.mobiliar.ch
raiffeisen.mobiliar.ch
gp-gw-dev.mobiliar.ch
mobiliar.ch
trainingnet-compliance.mobiliar.ch
api.training.cyber.mobiliar.ch
staging-video.mobiliar.ch
gp-prelogon.mobiliar.ch
test500.apps.mobiliar.ch
marke.mobiliar.ch
click.campaign.mobiliar.ch
newsletter-cdn.mobiliar.ch
selfservice.mobiliar.ch
secure.mobi.ch
gp-userid.mobiliar.ch
meinauto.mobiliar.ch
handwerker.mobiliar.ch
jobs.mobiliar.ch
selfservice.mobiliar.ch
gp-userid.mobiliar.ch
luawext.mobiliar.ch
strategiemap.mobiliar.ch
url4870.mobiliar.ch
resources.mobiliar.ch
gp-gw-dev.mobiliar.ch
selfservice.mobiliar.ch
newsletter.mobiliar.ch
ucc.mobi.ch
gp-testzertifikat.mobiliar.ch
*.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
mobiliar.ch
*.mobiliar.ch
kunst.mobiliar.ch
my.mobiliar.ch
fancystuff.mobiliar.ch
msghub.mobiliar.ch
mp.mobi.ch
cyber-training.mobiliar.ch
eshop.mobiliar.ch
test.mobiliar.ch
client-comparis.mobiliar.ch
b2capi1.mobiliar.ch
tinelstest.mobiliar.ch
www.handwerker.mobiliar.ch
check.mobiliar.ch
cyber-training.mobiliar.ch
b2capi.mobiliar.ch
liip-lead-client.mobiliar.ch
pssp-admin.mobiliar.ch
test.mobiliar.ch
vorsorge-mobiliar.ch
b2capi.mobiliar.ch
tymodenengelsman.com
vorsorge.mobiliar.ch
fileshare.mobiliar.ch
msghub.mobiliar.ch
meinauto-client.mobiliar.ch
smide.mobiliar.ch
gp-userid.mobiliar.ch
elm.mobiliar.ch
kunst.mobiliar.ch
igb2b.mobiliar.ch
b2eapi1.mobiliar.ch
eshop.mobiliar.ch
b2bapi2.mobiliar.ch
sign.mobiliar.ch
vorsorge.mobiliar.ch
viq.mobiliar.ch
jobs.mobiliar.ch
gp-gw-prelogon.mobiliar.ch
b2capi.mobiliar.ch
awareness.mobiliar.ch
z101392.mobiliar.ch
client-auto-i-dat.mobiliar.ch
kunst.mobiliar.ch
ftp.mobiliar.ch

Certificate

The complete raw certificate details for gp-ext.mobiliar.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPGkeVH3x3jroHRSM4Bf
+kt1msvmutcH2t5Z1XbdKO+UqO2Y9WiuGtCNmDsasE4EmzbzrrIO/3UA6tZ9hU/X
qU8EjC4UI0meVKh9xurM/bQgZqho52vmsg7mwcBazrdpayFoyaOjBk97CbjnA/nX
LA7szXNXP9w9J6Aansn7TCMZexE5qUG3D3YQoFLd4BE5mJHb+l+PqE651nQ5u20j
C74DS7sebqnJOy5IXf0MyXG1u92vqmuPob91IFFou6u7yYV5jSrSMJsTptSJlhRy
ph/ZnKMce0JZwbSKoAM8ziFWbx7bkdRMXveTfktxi3lAGsahF0XAlmO+ZREQasLV
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 580890474704264387751097091440333775283101264918
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 11:29:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-23 11:29:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gp-ext.mobiliar.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23347006459860962371785292099330913778639008702708981046748650346079037846910264794039503650206197055937751401982572781939459680721849502968549792654245104233960508464359509620454342998991973982492149397090305286618990054258523880146792602716452535480854994812395182750303717236153030320989596469716069255735573891721074902079668620989878697741087963840117373593056635649168283313105144803592589856788373563147432655032156185732683382388746388848559088627644849462117439989709740228534904946040858574799669707975535410762378152707660492555791409174115969188467754973664077839784912266558307916623748799162781268104581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gp-ext.mobiliar.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5bb29556b9e028ecf227a5f3b8d3ee2ca73b4afa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							025800770028e28138fd832145e9a9d6aa75376d8377a88512b3c07f72414821dcbde98c660000018f0ab7a8dd0000040300483046022100899b065c26943a9ffc9ea1b6a22fcc2c42feb9414fbbbecddde79672b54b4dbf02210086835fa43c87760ccc3b9275cd359d52475da9370fa2b66ec05aad32f8319290007600e092b3fc0c1dc8e768361fde61b9964d0a5278198a72d672c4b04da56d6f54040000018f0ab7a6b40000040300473045022058239f83d1a3ae4fb80d1e85fc123268636136d42704464df93c3b67e0440f31022100c320b5a50e6e42b293839ee1e85bf4f167dde3fe9a913b6ac3fe91442fc5aeec007500cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018f0ab7a57b00000403004630440220356db8776b6805b4159cf1719e3073cb0cba900ed3fd5194bbb561e0200c0da60220642b349daf8b626f4bd5d0f96cbef815165229361460b60a172877791e943472007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000018f0ab7a5ef000004030047304502202bcfb3a2c308cb53683593ab00f9749b99c4d2e31ce0f3eb1b732c3ba22a49e7022100ff1a333380ea5bf5d4e03b0b1eb89705f2d7106a14157434a0f914cba6aa1e9a0076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018f0ab7a5a500000403004730450221009607a0ab25c7d18dad378cbb7c8e7abe820ee63e995c4524df8744b22f339f970220158d77ea54415448f7de10830e86b1c2c3a28e0266c9269ac747a9d9484df903
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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