stecker.ebs.swiss

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 56:ed:61:64:a6:70:b7:93:77:7b:3b:7c:02:30:cf:52:26:ac:c8:03 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stecker.ebs.swiss

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 56:ed:61:64:a6:70:b7:93:77:7b:3b:7c:02:30:cf:52:26:ac:c8:03
Serial Number (int): 496266967044111137519292395977658344585477015555
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: b9:05:88:68:7b:a4:24:e9:c4:07:cb:64:ee:bb:9f:41:be:83:51:6a
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 99:ea:3e:b8:bb:68:d8:78:41:bb:cf:b6:c2:94:7f:36:dc:e1:7e:48
Fingerprint (sha256): 03:75:ec:06:db:ad:0f:31:74:04:b3:c4:d0:ca:6e:8a:3e:ed:5e:33:cc:fa:5e:af:c9:ea:09:8a:07:db:b4:99

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate stecker.ebs.swiss

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stecker.ebs.swiss

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stecker.ebs.swiss
www.stecker.ebs.swiss

Other certificates including the domain name ebs.swiss

(limited to 100 certificates)

Certificate

The complete raw certificate details for stecker.ebs.swiss in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 496266967044111137519292395977658344585477015555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-23 14:05:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-23 14:05:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stecker.ebs.swiss'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742285187830117542438601959052484072498779635076996239821212719367177942044323550750265880415655446232199918505960794635798495152433512009858728311700127311734195390161565760411185206959209548340114961571672061133735789142516239257275752845224084247601705393916633886121907183213427421395904916274336259186100576652729476683986447782129495940160801561480626405881941218343636612758144846181081718208132404674111442419835754342819782087040733979323339527690852558269739157015740273412616153538545370210152870359938983397127915523895658041697280920610147281194550085577119644950759529327669106451702773976728929009999167582047102992915060999499966842297059611380828946278583665140805353660795482787279361479917106423495876592120406369605957898121366296808685193723131708533505204552768038840788032912214345128445016031662009677724823595663583384014868894417148580041999092071822288398791586354066774904825339444920690184885127280708876454949106209528267967523514238956132402320209499504254195647701741433035295073727349653150860485703809200171436859105875382243391198569251517258410619852825827517840845650292344954022048155001777386882549100521702377829790440084822882490016347480271256970543036746276032834143997145210591210433898317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stecker.ebs.swiss'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stecker.ebs.swiss'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b90588687ba424e9c407cb64eebb9f41be83516a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (726 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (722 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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