identifikation-test.ukb.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 43:f1:44:84:3f:f4:8b:4f:8f:2c:eb:ca:7b:3c:93:a6:6d:7d:5a:96 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=identifikation-test.ukb.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 43:f1:44:84:3f:f4:8b:4f:8f:2c:eb:ca:7b:3c:93:a6:6d:7d:5a:96
Serial Number (int): 387882829875770031287582502281921490023402527382
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 0f:ef:2d:38:67:42:2e:aa:34:9a:90:4d:13:44:fd:b5:21:8f:ea:86
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 20:57:3f:62:40:13:8b:58:7f:a7:93:02:3a:a6:8c:aa:10:40:50:58
Fingerprint (sha256): 15:07:00:9b:16:dc:af:0d:92:e1:77:2b:9f:b9:7f:5d:07:d4:db:22:35:a4:77:ea:5f:2f:59:12:63:76:63:25

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate identifikation-test.ukb.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for identifikation-test.ukb.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

identifikation-test.ukb.ch

Other certificates including the domain name ukb.ch

(limited to 100 certificates)
www.ukb.ch
fintest-wwwsec.ukb.ch
gast.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.privasphere.com
twint-test.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
ukb00ncs104-e.ukb.ch
satellite-test.ukb.ch
identifikation-test.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
fintest-e-banking.ukb.ch
dialog.sbb.ch
www.privasphere.com
twint-test.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ot.ukb.ch
ssl.ukb.ch
ot.ukb.ch
ukb00ucc114.ukb.ch
securemail.ukb.ch
eroeffnung-test.ukb.ch
satellite.ukb.ch
www.privasphere.com
ukb00ncs106-e.ukb.ch
securemail.ukb.ch
www.privasphere.com
gast.ukb.ch
www.ukb.ch
autodiscover.ukb.ch
ot.ukb.ch
autodiscover.ukb.ch
eroeffnung-test.ukb.ch
twint.ukb.ch
dialog.sbb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
www.privasphere.com
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
ssl.ukb.ch
ukb00ncs104-e.ukb.ch
gast.ukb.ch
wwwsec.ukb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
eroeffnung.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
ukb00ucc114.ukb.ch
twint.ukb.ch
www.privasphere.com
www.ukb.ch
identifikation-test.ukb.ch
twint-test.ukb.ch
www.privasphere.com
dialog.sbb.ch
gast.ukb.ch
dialog.sbb.ch
ukbhb01mx01-e.urkb.ch
ukb00ucc114.ukb.ch
fintest-dev-wwwsec.ukb.ch
ssl.ukb.ch
identifikation.ukb.ch
satellite-test.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.privasphere.com
ssl.ukb.ch
autodiscover.ukb.ch
www.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
identifikation-test.ukb.ch
autodiscover.ukb.ch
fintest-e-banking.ukb.ch
twint.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
zukunftsbild.ukb.ch
zukunftsbild.ukb.ch
eroeffnung.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
ukb00ucc114.ukb.ch
identifikation-test.ukb.ch
ssl.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ukb00ncs106-e.ukb.ch
ukb00ucc114.ukb.ch

Certificate

The complete raw certificate details for identifikation-test.ukb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4D13XmSQ3oceDWJEYqqP
rn7HE5hdNt8gFvWgmNVEpzYh4frt1A1l1DW+doHrvey/1m5sRUCxEPNvaxngUx25
QmyfU6Uqzv29M8EEtRvmO4avNDjdE9Fan6coQp4gNH4xXVyUZ2oFCw+s33hHP3hk
fqCb9VBmmBAoBBd9WEw4YM7NkwOURVGkfVy3VyAbeNEsTju8PLB+tMgbvSUUG6rt
JOU2Lfv7ZnfIhdjPSVId/Q7UB/TIbZHpSHpobvE5uewiJ0GRvjA9618rchyCQZlH
KJ2tBJzjocLSeErgfzRX0IL6aXmblbcacsrKckbzYN9w5JkUkke82qdCa2WH/Wst
HKPxmXN8WZjSaZU/OW1Ez6vAqqrzraPHIxAph4uAAenFX8801yAkdVs0OaRrXj6f
fjJynHLwZvsGxTdbjQI38V9bO57DDReEjNAvMGaOObDx3Y8o3/+PVo/+LiLK6lzK
HlZtXjd0yTaIumuK6ncrH48Fbc8U37dNd1QvAxt3UK1f02X++oAIpe9V/pISjpLk
T99FPJgz1TF6m6V3Sm242vmjwvK5peOU7TtqreZylVrr0zA+BIRdzNO9Nq+wRMjF
7O1+zozuuePYpZ6Qv+WnSfPzJjBSACGoighbpLYtr+R4mHp2il2xtYNa+ieLmGwd
gKGyv91swLlChVrlwY8Sf/cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387882829875770031287582502281921490023402527382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 13:08:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-25 13:08:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'identifikation-test.ukb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 914819804678660436002019733676306073737165633338025212220121971741105947851777347708764245394346516274024309337032899150144490780988805814896276149533883658872572133000461703586902655729301359798126594061141708492811611820378407752668279078757201816726201265597573614702238659032641386860905132786442074441820484618203701177731512004954972113413847523472697142315898735309130804893959115212034299340768668766449591824689303748798867936894461365221487324811229947556909210848531787395877989474193230421432598229335265027736561344270407006382893145163035083233660857846482368295933576048704813574055097689006296795175964978284572680760142605369387971752733405495432300533043235392628130238653683250964120547297512214725946965860814622840550931431875780583750606909029372851034499239749724867702883668235244725030268306888481937344371356767317944360979030813261429984027961214041436167550764066443711413613081153832803889467570498649241372204321235249942224843571826613550848315047638385804699953115108930921600180804439453166904828489426558577439401880528984757748404976627390872033726586874812053003668396737595786459710132838339625158822199983927191029633809710195002778263069617673333192392415045238957772408138345265526876214034423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identifikation-test.ukb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0fef2d3867422eaa349a904d1344fdb5218fea86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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