adfs.bgbern.ch

- Burgergemeinde Bern -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 6c:87:06:1c:a3:15:f4:2e:db:b7:aa:9e:ad:7f:df:a5:aa:98:69:ac was issued on by SwissSign AG.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Burgergemeinde Bern

Organization: Burgergemeinde Bern
State / Province: Bern
Locality: Bern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:87:06:1c:a3:15:f4:2e:db:b7:aa:9e:ad:7f:df:a5:aa:98:69:ac
Serial Number (int): 619582136269176321256452259119391770355804170668
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 8b:96:b3:74:85:5f:4f:ba:db:32:13:95:fb:f5:71:f5:67:0a:70:17
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): 7b:4f:ad:c0:12:6d:78:e6:da:78:4e:26:fd:b7:58:4a:16:b2:64:55
Fingerprint (sha256): 08:9b:a5:5e:88:c9:d1:42:a1:51:08:27:44:5b:0f:22:08:2e:0c:49:c4:4a:ce:4b:a1:97:8d:45:b4:5a:5e:47

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate adfs.bgbern.ch

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adfs.bgbern.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adfs.bgbern.ch
certauth.adfs.bgbern.ch
enterpriseregistration.bgbern.ch

Other certificates including the domain name bgbern.ch

(limited to 100 certificates)
help.bgbern.ch
stellen.bgbern.ch
burgerkalender.bgbern.ch
brs.bgbern.ch
bewerben.bgbern.ch
help.bgbern.ch
berufsbildung.bgbern.ch
adfs.bgbern.ch
www.bgbern.ch
test.bgbern.ch
demo.bgbern.ch
www.bgbern.ch
test.bgbern.ch
tannenbaumparty.bgbern.ch
help.bgbern.ch
webportal.bgbern.ch
tannenbaumparty.bgbern.ch
test.bgbern.ch
test.bgbern.ch
forst.bgbern.ch
demo.bgbern.ch
www.bgbern.ch
www.affen.ch
test.forst.bgbern.ch
unentbaerlich.ch
webportal.bgbern.ch
statistics.bgbern.net
preauth.bgbern.ch
test.bgbern.ch
statistics.bgbern.net
guest.bgbern.ch
www.bgbern.ch
demo.bgbern.ch
tannenbaumparty.bgbern.ch
stellen.bgbern.ch
stellen.bgbern.ch
brs.bgbern.ch
eas.bgbern.ch
berufsbildung.bgbern.ch
test.bgbern.ch
statistics.bgbern.net
statistics.bgbern.net
test.forst.bgbern.ch
test.bgbern.ch
portal.bgbern.ch
berufsbildung.bgbern.ch
help.bgbern.ch
unentbaerlich.ch
test.bgbern.ch
forst.bgbern.ch
medaillon.bgbern.ch
medaillon.bgbern.ch
www.affen.ch
burgerkalender.bgbern.ch
test.bgbern.ch
tannenbaumparty.bgbern.ch
help.bgbern.ch
tannenbaumparty.bgbern.ch
help.bgbern.ch
forstbetrieb.bgbern.ch
eas.bgbern.ch
stellen.bgbern.ch
unentbaerlich.ch
bernburger.ch
bernburger.ch
forstbetrieb.bgbern.ch
forst.bgbern.ch
mail.bgbern.ch
webauth.bgbern.ch
burgerkalender.bgbern.ch
berufsbildung.bgbern.ch
www.bgbern.ch
eas.bgbern.ch
eas.bgbern.ch
forst.bgbern.ch
test.bgbern.ch
medaillon.bgbern.ch
brs.bgbern.ch
medaillon.bgbern.ch
tannenbaumparty.bgbern.ch
test.bgbern.ch
statistics.bgbern.net
medaillon.bgbern.ch
unentbaerlich.ch
www.affen.ch
brs.bgbern.ch
mieten.bgbern.ch
help.bgbern.ch
zugang.bgbern.ch
www.redaktion.bgbern.ch
tannenbaumparty.bgbern.ch
statistics.bgbern.net
help.bgbern.ch
intranet.bgbern.ch
brs.bgbern.ch
www.redaktion.bgbern.ch
brs.bgbern.ch
help.bgbern.ch
share.bgbern.ch
affen.bgbern.ch

Certificate

The complete raw certificate details for adfs.bgbern.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/P4u2rDtbD1eKshpfbx
4FIYf1F751dFgUqs+dCbzzzP0nOkMXCJikxAKU+DKpHbnr5HeWhddJ9W4SutCjSq
ub4I5MgiwVwzpjVbSbtpKLZrNseiVZCCtNdAmCk3GxfmvEBIbu8B8idcmBofzN3H
EGII4LvnKC9jMZ3l0IZWVscYTmk8dmyCjw6evNzZkLHFT4CMlE7NvG5i6p5dIS8H
2CpzHPZIvsfT1x3pTfI9j40IMLK1uTRZtgugC5jJiLuZ2lzlklxFY74ipT9n66m4
2ztbIIf42+EKmdaLxoPjXMH5Irllai6ZBN2XmFfyK5FbPHF+6OXhpFY3I4hpLmgM
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 619582136269176321256452259119391770355804170668
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 15:30:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-21 15:30:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burgergemeinde Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adfs.bgbern.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27766495672237117404482249848016612232902451769519023614448551373832127541395065268497518640201262508644749151437230636133966664755665526652785799362124241531768932756800887712063808283767733970696210490731382231361672964689956376257231005521934873970157726850828174638584867645399888444574454395786378342919716489938918876803363350319065726481166904398858231515857422889460836439045019797358400855643206564101689942221540460234254189880306154959922036991989456749982961505322950098700059193507551554275741346862417705366668869454735459062597822080358205554339307084218173075714086985345161270547945245866165759642717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.bgbern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certauth.adfs.bgbern.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.bgbern.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b96b374855f4fbadb321395fbf571f5670a7017
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.11
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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